[Unit]
Description=Prole: ensure svc.prole.org ports are ACCEPTed before Tailscale filter rules
Wants=network-online.target
After=network-online.target
After=tailscaled.service

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/prole-svc-iptables-allow
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target