[Unit] Description=Generate nftable rules from blocklists Requires=network.target [Service] Type=oneshot ExecStart=/usr/bin/blocklist2nft