[Unit]
Description=Sync remote blocklist to nftables
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/blocklist-sync
User=root
Group=root

[Install]
WantedBy=multi-user.target