18 lines
682 B
Desktop File
18 lines
682 B
Desktop File
# /etc/systemd/system/dana-1c-egress.service
|
|
# Сохраняет правила egress-изоляции к 1C после перезагрузки/рестарта docker.
|
|
[Unit]
|
|
Description=Restrict container egress to 1C MCP (dana-1c-bridge only)
|
|
After=docker.service
|
|
Requires=docker.service
|
|
PartOf=docker.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
# docker должен успеть создать цепочку DOCKER-USER
|
|
ExecStartPre=/bin/sh -c 'for i in $(seq 1 30); do iptables -L DOCKER-USER -n >/dev/null 2>&1 && exit 0; sleep 2; done; exit 1'
|
|
ExecStart=/home/mikail/dana-medical/deploy/firewall-1c-egress.sh
|
|
RemainAfterExit=yes
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target docker.service
|