[Unit]
# Revokes the PPPoE dial lease. Only ever takes the WAN away, never grants it,
# which is what makes a 5s cadence safe: it touches no VyOS configuration and
# cannot wedge the commit lock.
Description=Revoke the PPPoE dial lease when this router is not master
After=vyos-router.service

[Service]
Type=oneshot
ExecStart=/config/vrrp-wan-guard