[Unit]
Description=Mirror the CrowdSec range ban decisions into the nftables table inet crowdsec_ranges
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/crowdsec-range-bouncer
TimeoutStartSec=60
StateDirectory=crowdsec-range-bouncer
StateDirectoryMode=0700
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
NoNewPrivileges=true