[Unit]
Description=IPTABLES Packet Filtering
ConditionPathExists=/usr/lib/coreelec/iptables_helper
ConditionPathExists=|/storage/.cache/services/iptables.conf
Before=network.target
Wants=network.target

[Service]
Type=oneshot
EnvironmentFile=-/storage/.cache/services/iptables.conf
ExecStart=/usr/lib/coreelec/iptables_helper enable
ExecReload=/usr/lib/coreelec/iptables_helper enable
ExecStop=/usr/lib/coreelec/iptables_helper disable
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target