File: //lib/systemd/system/iptables_exporter.service
# -*- mode: conf -*-
[Unit]
Description=Prometheus exporter for iptables metrics
Documentation=https://dev.azure.com/newfold/observability/_git/iptables_exporter
After=network.target
[Service]
EnvironmentFile=-/etc/default/iptables_exporter
User=grafana-agent
CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_NET_ADMIN CAP_NET_RAW
AmbientCapabilities=CAP_DAC_READ_SEARCH CAP_NET_ADMIN CAP_NET_RAW
ExecStart=/usr/bin/iptables_exporter $EXPORTER_OPTS
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
RestartSec=5s
[Install]
WantedBy=multi-user.target