blob: 2f4a2f927ec5860167b2ead586ba95809cc9f49b [file] [log] [blame]
Václav Kubernát22e240c2021-02-04 10:14:19 +01001[Unit]
2Description=Firewall management via sysrepo
3After=syslog.target network.target czechlight-install-yang.service cfg-restore-sysrepo.service nacm-restore.service
4Before=rauc-mark-good.service
5PartOf=netopeer2.service
6Requires=czechlight-install-yang.service cfg-restore-sysrepo.service nacm-restore.service
7ConditionKernelCommandLine=czechlight
8
9[Service]
10Type=simple
11ExecStart=/usr/bin/veliad-firewall
12PrivateTmp=yes
13PrivateDevices=no
14ProtectSystem=yes
15ProtectHome=yes
16Restart=always
17RestartSec=10s
18LogRateLimitIntervalSec=10
19LogRateLimitBurst=30000
20SyslogLevel=alert
21
22[Install]
23WantedBy=multi-user.target