[Unit]
Description=ITPP P2-C1 DOCKER-USER firewall hardening (Tailscale-only management consoles)
After=docker.service
Wants=docker.service

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/itpp-docker-user.sh
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target