Remove service because it exist on debian
This commit is contained in:
parent
c5754935f6
commit
04c16cf5e9
|
@ -12,15 +12,6 @@
|
|||
group: root
|
||||
mode: 0700
|
||||
|
||||
- name: Add nftables.service
|
||||
ansible.builtin.template:
|
||||
src: nftables.service.j2
|
||||
dest: /etc/systemd/system/nftables.service
|
||||
owner: root
|
||||
group: root
|
||||
mode: 0644
|
||||
notify: Restart-nftables
|
||||
|
||||
- name: Create nftables default files
|
||||
ansible.builtin.template:
|
||||
src: nftables.j2
|
||||
|
|
|
@ -1,21 +0,0 @@
|
|||
{{ ansible_managed | comment }}
|
||||
[Unit]
|
||||
Description=nftables
|
||||
Documentation=man:nft(8) http://wiki.nftables.org
|
||||
Wants=network-pre.target
|
||||
Before=network-pre.target shutdown.target
|
||||
Conflicts=shutdown.target
|
||||
DefaultDependencies=no
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
StandardInput=null
|
||||
ProtectSystem=full
|
||||
ProtectHome=true
|
||||
ExecStartPre=/usr/sbin/nft flush ruleset
|
||||
ExecStart=/usr/sbin/nft -f /etc/nftables.conf
|
||||
ExecStop=/usr/sbin/nft flush ruleset
|
||||
|
||||
[Install]
|
||||
WantedBy=sysinit.target
|
Loading…
Reference in a new issue