diff --git a/Installers/pre_install_proxmos.sh b/Installers/pre_install_proxmos.sh index 39dab0c..54f17a9 100644 --- a/Installers/pre_install_proxmos.sh +++ b/Installers/pre_install_proxmos.sh @@ -30,24 +30,29 @@ sudo /etc/init.d/zabbix-agent status #zabbix_agentd -V echo -e "${C_LGn}Autoupdate IPTable rules ...${RES}" -tee /etc/systemd/system/iptables-restore-custom.service > /dev/null << EOF +tee /etc/systemd/system/iptables-restore-custom.service > /dev/null <<'EOF' [Unit] -Description=Restore iptables rules after Proxmox Firewall -After=pve-firewall.service +Description=Restore custom IPv4 NAT rules after Proxmox Firewall Wants=network-online.target +After=network-online.target pve-firewall.service ConditionPathExists=/etc/iptables/rules.v4 [Service] Type=oneshot -ExecStart=/bin/sh -c '/sbin/iptables-restore < /etc/iptables/rules.v4' +ExecStart=/bin/sh -c '/sbin/iptables-restore -T nat < /etc/iptables/rules.v4' RemainAfterExit=yes [Install] WantedBy=multi-user.target EOF -systemctl enable --now iptables-restore-custom.service +systemctl daemon-reload +# Не даём стандартному сервису попытаться загрузить полный PVE snapshot. +systemctl disable netfilter-persistent.service 2>/dev/null || true + +# Включить только на будущие загрузки. +systemctl enable iptables-restore-custom.service echo -e "${C_LGn}Installing Node Exporter ...${RES}" cd $HOME && \