vpnwrap/vpnns-ns.service

[Unit]
Description=VPN Namespace Isolation
After=network.target

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/opt/vpnwrap/nsctl.sh enable
ExecStop=/opt/vpnwrap/nsctl.sh disable
Restart=on-failure

[Install]
WantedBy=multi-user.target