pdns/pdns.service.in

   1 [Unit]
   2 Description=PowerDNS Authoritative Server
   3 Documentation=man:pdns_server(1) man:pdns_control(1)
   4 Documentation=https://doc.powerdns.com
   5 Wants=network-online.target
   6 After=network-online.target mysqld.service postgresql.service slapd.service mariadb.service
   7
   8 [Service]
   9 Type=notify
  10 ExecStart=@sbindir@/pdns_server --guardian=no --daemon=no --disable-syslog --write-pid=no
  11 Restart=on-failure
  12 RestartSec=1
  13 StartLimitInterval=0
  14 PrivateTmp=true
  15 PrivateDevices=true
  16 CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_CHOWN CAP_SYS_CHROOT
  17 NoNewPrivileges=true
  18 # ProtectSystem=full will disallow write access to /etc and /usr, possibly
  19 # not being able to write slaved-zones into sqlite3 or zonefiles.
  20 ProtectSystem=full
  21 ProtectHome=true
  22 RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
  23
  24 [Install]
  25 WantedBy=multi-user.target