[net-firewall/pglinux] add systemd unit