## Copyright (C) 2012 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions.

#### meta start
#### project Whonix
#### category time and firewall
#### description
## Restarts whonix-firewall when /run/sdwdate/first_success status file was
## created, i.e. when sdwdate succeeded so Whonix firewall will move from
## timesync-fail-closed mode to full mode.
##
## Starts <code>/usr/libexec/whonix-firewall/firewall-restarter</code>.
#### meta end

[Unit]
Description=Whonix firewall watcher
Documentation=https://www.whonix.org/wiki/Whonix_Firewall

Before=sdwdate.service
Before=qubes-whonix-torified-updates-proxy-check.service

After=whonix-firewall.service

[Service]
Type=simple

SuccessExitStatus=143
KillMode=control-group
PrivateTmp=true

ExecStart=/usr/libexec/whonix-firewall/firewall-restarter

[Install]
WantedBy=multi-user.target