[Unit]
Description=Refresh the addresses of the allowlisted domains
After=firewall.service

[Service]
Type=oneshot
ExecStart=/refresh_rules.sh

[Install]
WantedBy=multi-user.target