[Unit]
Description=NanoDNS Server (Rust)
Documentation=https://github.com/nanodns/nanodns
After=network.target

[Service]
ExecStart=/usr/local/bin/nanodns start --config /etc/nanodns/nanodns.json
Restart=on-failure
RestartSec=5
# Drop to nobody after binding port 53
AmbientCapabilities=CAP_NET_BIND_SERVICE
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
ReadOnlyPaths=/etc/nanodns

[Install]
WantedBy=multi-user.target
