diff --git a/firewall-init.service b/firewall-init.service
new file mode 100644
index 0000000..c896ae0
--- /dev/null
+++ b/firewall-init.service
@@ -0,0 +1,13 @@
+# copy to /etc/systemd/system/
+[Unit]
+Description=Firewall Init
+After=network.target iptables.service firewalld.service fail2ban.service
+Before=docker.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/etc/network/firewall/init.sh
+
+[Install]
+WantedBy=multi-user.target