| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 1 | [Unit] |
| 2 | Description=Firewall management via sysrepo |
| Jan Kundrát | e950cf7 | 2024-09-06 17:46:11 +0200 | [diff] [blame^] | 3 | After=syslog.target network.target cfg-yang.service |
| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 4 | Before=rauc-mark-good.service |
| Jan Kundrát | e950cf7 | 2024-09-06 17:46:11 +0200 | [diff] [blame^] | 5 | Requires=cfg-yang.service |
| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 6 | ConditionKernelCommandLine=czechlight |
| 7 | |
| 8 | [Service] |
| 9 | Type=simple |
| 10 | ExecStart=/usr/bin/veliad-firewall |
| Tomáš Pecka | d3861ce | 2022-05-11 11:51:30 +0200 | [diff] [blame] | 11 | Group=sysrepo |
| Václav Kubernát | 22e240c | 2021-02-04 10:14:19 +0100 | [diff] [blame] | 12 | PrivateTmp=yes |
| 13 | PrivateDevices=no |
| 14 | ProtectSystem=yes |
| 15 | ProtectHome=yes |
| 16 | Restart=always |
| 17 | RestartSec=10s |
| 18 | LogRateLimitIntervalSec=10 |
| 19 | LogRateLimitBurst=30000 |
| 20 | SyslogLevel=alert |
| 21 | |
| 22 | [Install] |
| 23 | WantedBy=multi-user.target |