From e76cb4c1b6fc83a28055b1fb010cf205f7cd285e Mon Sep 17 00:00:00 2001
From: kaka <kaka@git.com>
Date: Wed, 4 Nov 2026 23:13:29 +0800
Subject: [PATCH] Reload active firewall gate without restarting required
 Docker and Tailscale services

---
 firewall.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/firewall.sh b/firewall.sh
index 98073e0..9cb8e05 100644
--- a/firewall.sh
+++ b/firewall.sh
@@ -123,7 +123,8 @@ UNIT
   done
   systemctl daemon-reload
   systemctl enable platform-firewall.service >/dev/null
-  systemctl restart platform-firewall.service
+  # Reload an active gate: restarting a Required unit stops Docker/Tailscale.
+  systemctl reload-or-restart platform-firewall.service
 }
 check_ssh_transaction() {
   local transaction=$1 digest=$2 ssh_state=${3:-/var/lib/platform-bootstrap/ssh}