[Unit]
Description=Run iptables-enforce after networkd startup
Requires=network-online.target
After=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/iptables-enforce

[Install]
WantedBy=multi-user.target