# APF scheduled maintenance — all periodic tasks in one file
SHELL=/bin/bash
# Daily restart (full rule reload)
0 0 * * * root [ -x /usr/sbin/apf ] && /usr/sbin/apf -r >> /dev/null 2>&1
# Hourly ipset block list refresh (per-list intervals in ipset.rules)
15 * * * * root [ -x /usr/sbin/apf ] && /usr/sbin/apf --ipset-update >> /dev/null 2>&1
# Temporary trust entry expiry (fast-exits when no temp entries exist)
* * * * * root [ -x /usr/sbin/apf ] && /usr/sbin/apf --temp-expire >> /dev/null 2>&1
