[Unit]
Description=Restore ipset rules
# if both are queued for some reason, don't store before restoring :)
Before=ipset-store.service
Before=iptables-restore.service
Before=ip6tables-store.service
Conflicts=shutdown.target

[Service]
Type=oneshot
ExecStart=/bin/sh -c "/usr/sbin/ipset restore < /var/lib/ipset/rules-save"

[Install]
WantedBy=basic.target