[Unit]
Description=Initial closed egress for Custodian account
Before=cust73-sshd.service

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/sbin/nft -f /etc/cust73/closed-egress.nft

[Install]
WantedBy=multi-user.target