[net-firewall/ufw] add systemd unit