[Unit]
Description=B2BCall custom nftables rules (protects Asterisk admin ports)
After=docker.service network-online.target
Wants=network-online.target
PartOf=docker.service

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStartPre=-/usr/sbin/nft delete table inet b2bcall_fw
ExecStart=/usr/sbin/nft -f /opt/b2bcall/infrastructure/nftables/b2bcall.nft
ExecStop=/usr/sbin/nft delete table inet b2bcall_fw

[Install]
WantedBy=multi-user.target