[Unit] Description=Nftables simple and secure firewall Documentation=man:nft(8) Wants=network-pre.target Before=network-pre.target [Service] Type=simple ExecStart=/usr/bin/nft --file /etc/nftables.conf ExecStop=/usr/bin/nft flush table inet simple_firewall ';' delete table inet simple_firewall RemainAfterExit=yes [Install] WantedBy=multi-user.target