pdns/pdns.service.in

   1 [Unit]
   2 Description=PowerDNS Authoritative Server
   3 Documentation=man:pdns_server(1) man:pdns_control(1)
   4 Documentation=https://doc.powerdns.com
   5 Wants=network-online.target
   6 After=network-online.target mysqld.service postgresql.service slapd.service
   7
   8 [Service]
   9 Type=notify
  10 ExecStart=@sbindir@/pdns_server --guardian=no --daemon=no --disable-syslog --write-pid=no
  11 Restart=on-failure
  12 StartLimitInterval=0
  13 PrivateTmp=true
  14 PrivateDevices=true
  15 CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_CHOWN CAP_SYS_CHROOT
  16 NoNewPrivileges=true
  17 # ProtectSystem=full will disallow write access to /etc and /usr, possibly
  18 # not being able to write slaved-zones into sqlite3 or zonefiles.
  19 ProtectSystem=full
  20 ProtectHome=true
  21 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
  22
  23 [Install]
  24 WantedBy=multi-user.target