Replace the nftables role with host_firewall, one atomic inet host input table with zones, geo sets and lockout rollback

2026-10-07 07:29:29 +00:00
parent 27e9d4a1ab
commit cfe87002c5
19 changed files with 417 additions and 227 deletions
@@ -0,0 +1,8 @@
+[Unit]
+Description=Refresh the geo sets of the host firewall
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/nft-host-geo