[Unit]
Description=Save and load ipsets

[Service]
Type=oneshot
RemainAfterExit=1
ExecStartPre=/bin/mkdir -p /var/lib/ipset/ ; /usr/bin/touch /var/lib/ipset/rules-save ; chmod 0600 /var/lib/ipset/rules-save ; /usr/sbin/ipset flush ; /usr/sbin/ipset destroy
ExecStart=/usr/sbin/ipset restore -file /var/lib/ipset/rules-save
ExecStop=/usr/sbin/ipset save -file /var/lib/ipset/rules-save
ExecStopPost=/usr/sbin/ipset flush ; /usr/sbin/ipset destroy

[Install]
Before=iptables ip6tables
WantedBy=iptables.service ip6tables.service