summarylogtreecommitdiffstats
path: root/nft-geo-filter.service
blob: 89142d43e26f9e6206b13c0b747ebe61e1c8bf2e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
[Unit]
Description=Allow/deny traffic in nftables using country specific IP blocks
Requires=network-online.target
After=network-online.target

[Service]
Type=oneshot
EnvironmentFile=-/etc/conf.d/nft-geo-filter
ExecStart=/usr/bin/nft-geo-filter --counter \
                                  --table-family netdev \
                                  --interface $INTERFACE \
                                  --table-name $TABLE_NAME \
                                  $BLOCKED_COUNTRIES