[Unit]
Description=Restore ipset rules
DefaultDependencies=no
Before=netfilter-persistent.service
Wants=network-pre.target
After=network-pre.target

[Service]
Type=oneshot
ExecStart=/sbin/ipset restore < /etc/ipset/ipset.rules
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target