pdns/pdns.service.in

   1 [Unit]
   2 Description=PowerDNS Authoritative Server
   3 Documentation=man:pdns_server(1) man:pdns_control(1)
   4 Documentation=https://doc.powerdns.com
   5 Wants=network-online.target
   6 After=network-online.target mysqld.service postgresql.service slapd.service
   7
   8 [Service]
   9 Type=notify
  10 ExecStart=@sbindir@/pdns_server --guardian=no --daemon=no --disable-syslog --write-pid=no
  11 Restart=on-failure
  12 PrivateTmp=true
  13 PrivateDevices=true
  14 CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_CHOWN CAP_SYS_CHROOT
  15 NoNewPrivileges=true
  16 # ProtectSystem=full will disallow write access to /etc and /usr, possibly
  17 # not being able to write slaved-zones into sqlite3 or zonefiles.
  18 ProtectSystem=full
  19 ProtectHome=true
  20 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
  21
  22 [Install]
  23 WantedBy=multi-user.target