[Unit]
Description=occupymedia edge firewall (Cloudflare-only 80/443)
After=docker.service network-online.target
Wants=network-online.target

[Service]
Type=oneshot
ExecStart=/opt/anarchoposter/infra/occupymedia/edge/edge-firewall.sh
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target