[Unit] Description=Workstation access restriction for host metrics Docker ports Before=docker.service After=network-pre.target [Service] Type=oneshot ExecStart=/usr/local/sbin/host-metrics-access RemainAfterExit=yes [Install] WantedBy=multi-user.target