1[Unit] 2Before=network-pre.target 3 4[Service] 5Type=oneshot 6RemainAfterExit=yes 7ExecStart=/usr/libexec/nft-configure.sh 8ExecReload=/usr/libexec/nft-configure.sh 9ExecStop=/usr/sbin/nft flush ruleset 10 11[Install] 12WantedBy=multi-user.target 13