From ca7bf832d09faefd997c6ebaca106af34e38d911 Mon Sep 17 00:00:00 2001
From: Leo Antunes <costela@debian.org>
Date: Mon, 18 Oct 2021 23:55:28 +0200
Subject: [PATCH] d/knockd.service: only start when online

---
 debian/knockd.service | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/debian/knockd.service b/debian/knockd.service
index 2c9aad4..48d51bd 100644
--- a/debian/knockd.service
+++ b/debian/knockd.service
@@ -1,6 +1,7 @@
 [Unit]
 Description=Port-Knock Daemon
-After=network.target
+After=network-online.target
+Wants=network-online.target
 Documentation=man:knockd(1)
 
 [Service]
@@ -10,7 +11,7 @@ ExecReload=/bin/kill -HUP $MAINPID
 KillMode=mixed
 SuccessExitStatus=0 2 15
 ProtectSystem=full
-CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN
+CapabilityBoundingSet=CAP_NET_RAW CAP_NET_ADMIN CAP_SYS_MODULE
 
 [Install]
 WantedBy=multi-user.target