[Unit]
Description=Firewall
After=network.target

[Service]
RemainAfterExit=yes
ExecStart=/usr/local/bin/firewall start
ExecStartPost=/bin/systemctl restart fail2ban.service
ExecReload=/usr/local/bin/firewall reload
ExecStop=/usr/local/bin/firewall stop
User=root

[Install]
WantedBy=multi-user.target