# {{ ansible_managed }}

{%- if groups['gateway_server']|string is search(inventory_hostname) %}
[Unit]
Description=IPv6 Firewall with ip6tables
After=network.target

[Service]
SyslogIdentifier="ip6t-gateway"
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/local/sbin/ip6t-firewall-gateway start
ExecStop=/usr/local/sbin/ip6t-firewall-gateway stop
User=root

[Install]
WantedBy=multi-user.target
{% else %}
[Unit]
Description=IPv6 Firewall with ip6tables
After=network.target

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/local/sbin/ip6t-firewall-server start
ExecStop=/usr/local/sbin/ip6t-firewall-server stop
User=root

[Install]
WantedBy=multi-user.target
{% endif %}