Make router create necessary firewall NAT rules on host, via systemd units. Neat.