[Unit]
Description=Contextra Metadata LAN access guard
Before=docker.service

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/bin/python3 /workspace/contextra-runtime-config/metadata-lan/firewall.py apply

[Install]
WantedBy=multi-user.target