| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 1 | [Unit] |
| 2 | Description=Firewall management via sysrepo |
| 3 | After=syslog.target network.target czechlight-install-yang.service cfg-restore-sysrepo.service nacm-restore.service |
| 4 | Before=rauc-mark-good.service |
| 5 | PartOf=netopeer2.service |
| 6 | Requires=czechlight-install-yang.service cfg-restore-sysrepo.service nacm-restore.service |
| 7 | ConditionKernelCommandLine=czechlight |
| 8 | |
| 9 | [Service] |
| 10 | Type=simple |
| 11 | ExecStart=/usr/bin/veliad-firewall |
| 12 | PrivateTmp=yes |
| 13 | PrivateDevices=no |
| 14 | ProtectSystem=yes |
| 15 | ProtectHome=yes |
| 16 | Restart=always |
| 17 | RestartSec=10s |
| 18 | LogRateLimitIntervalSec=10 |
| 19 | LogRateLimitBurst=30000 |
| 20 | SyslogLevel=alert |
| 21 | |
| 22 | [Install] |
| 23 | WantedBy=multi-user.target |