summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAhmed Abdelhalim <[email protected]>2025-11-19 16:59:51 +0100
committerAhmed Abdelhalim <[email protected]>2025-11-19 16:59:51 +0100
commitb8c4450790a265a175f678f0ce19ec757b5373d5 (patch)
treeea46dd4238376a056a66c66e5ddf2a69e3670660
parent22ecae0eea8bc58ae446dfac1f1eaf5a7b438059 (diff)
Update docs about the usage of gateway-init service
-rw-r--r--roles/gateway/templates/gateway-init.service.j24
1 files changed, 4 insertions, 0 deletions
diff --git a/roles/gateway/templates/gateway-init.service.j2 b/roles/gateway/templates/gateway-init.service.j2
index 8b4635d8..4fec5d22 100644
--- a/roles/gateway/templates/gateway-init.service.j2
+++ b/roles/gateway/templates/gateway-init.service.j2
@@ -5,6 +5,10 @@ After=network.target
[Service]
Type=oneshot
+# Both commands run at boot to handle either scenario:
+# - If VPN autostart is enabled: vpn applies rules, direct ignores (VPN active)
+# - If no VPN autostart: vpn ignores (no interfaces), direct applies rules
+# The gateway-apply-rules script checks interface state and only applies appropriate rules
ExecStart=/usr/local/bin/gateway-apply-rules vpn
ExecStart=/usr/local/bin/gateway-apply-rules direct
User=root