[Unit]
Description=Restrict Looper ingress to loopback and approved Tailscale controllers
Before=tailscaled.service

[Service]
Type=oneshot
ExecStart=/usr/sbin/nft -f /etc/nftables.d/looper-ingress.nft
ExecReload=/usr/sbin/nft -f /etc/nftables.d/looper-ingress.nft
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target