[Unit]
ConditionPathExists=/var/run/qubes-service/netfilter-persistent
After=qubes-sysinit.service