# /etc/systemd/system/ts2-netns.service

[Unit]
Description=ts2 netns + veth + NAT
After=network-online.target
Wants=network-online.target
# tie tailscaled lifecycle to this
Before=tailscaled-ts2.service

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/local/sbin/ts2-netns-up
ExecStop=/usr/local/sbin/ts2-netns-down

[Install]
WantedBy=multi-user.target