{ pkgs, lib, config, ... }:
{
systemd.services.krebs-iptables.serviceConfig.ExecStartPost = pkgs.writeDash "kick_docker" ''
${pkgs.systemd}/bin/systemctl restart docker.service
'';
}