Reload active firewall gate without restarting required Docker and Tailscale services

2026-11-04 23:13:29 +08:00
parent db1bd78bec
commit e76cb4c1b6
1 changed files with 2 additions and 1 deletions
--- a/firewall.sh
+++ b/firewall.sh
@@ -123,7 +123,8 @@ UNIT
  done
  systemctl daemon-reload
  systemctl enable platform-firewall.service >/dev/null
-  systemctl restart platform-firewall.service
+  # Reload an active gate: restarting a Required unit stops Docker/Tailscale.
+  systemctl reload-or-restart platform-firewall.service
 }
 check_ssh_transaction() {
  local transaction=$1 digest=$2 ssh_state=${3:-/var/lib/platform-bootstrap/ssh}