mirror of
https://framagit.org/ppom/reaction
synced 2024-06-03 00:52:12 +02:00
29 lines
996 B
Desktop File
29 lines
996 B
Desktop File
# vim: ft=systemd
|
|
[Unit]
|
|
WantedBy=multi-user.target
|
|
|
|
[Service]
|
|
ExecStart=/path/to/reaction -c /etc/reaction.yml
|
|
|
|
# Create an iptables chain for reaction
|
|
ExecStartPre=/path/to/iptables -w -N reaction
|
|
# Set its default to ACCEPT
|
|
ExecStartPre=/path/to/iptables -w -A reaction -j ACCEPT
|
|
# Always accept 127.0.0.1 && ::1
|
|
ExecStartPre=/path/to/iptables -w -I reaction 1 -s 127.0.0.1 -j ACCEPT
|
|
ExecStartPre=/path/to/iptables -w -I reaction 1 -s ::1 -j ACCEPT
|
|
# Insert this chain as the first item of the INPUT chain (for incoming connections)
|
|
ExecStartPre=/path/to/iptables -w -I INPUT -p all -j reaction
|
|
|
|
# Remove the chain from the INPUT chain
|
|
ExecStopPost=/path/to/iptables -w -D INPUT -p all -j reaction
|
|
# Empty the chain
|
|
ExecStopPost=/path/to/iptables -w -F reaction
|
|
# Delete the chain
|
|
ExecStopPost=/path/to/iptables -w -X reaction
|
|
|
|
# Ask systemd to create /var/lib/reaction (/var/lib/ is implicit)
|
|
StateDirectory=reaction
|
|
# Start reaction in its state directory
|
|
WorkingDirectory=/var/lib/reaction
|