This unit is provided by:
Options
-
[Install]
-
WantedBy=multi-user.target
-
-
[Service]
-
AmbientCapabilities=CAP_NET_BIND_SERVICE
-
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-
ExecStart=/usr/bin/dnsdist --config /etc/dnsdist/dnsdist-%i.conf --supervised --disable-syslog
-
ExecStart=/usr/bin/dnsdist --config /etc/dnsdist/dnsdist-%i.conf -u dnsdist -g dnsdist --supervised --disable-syslog
-
ExecStartPre=/usr/bin/dnsdist --config /etc/dnsdist/dnsdist-%i.conf --check-config
-
ExecStartPre=/usr/bin/dnsdist --config /etc/dnsdist/dnsdist-%i.conf -u dnsdist -g dnsdist --check-config
-
Group=_dnsdist
-
Group=dnsdist
-
LimitNOFILE=16384
-
LockPersonality
Introduced in systemd 235=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
PrivateDevices
Introduced in systemd 209=yes -
PrivateTmp=yes
-
ProtectClock
Introduced in systemd 245=yes -
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=full -
Restart=on-failure
-
RestartSec=2
-
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
StartLimitInterval=0
-
SyslogIdentifier=dnsdist-%i
-
SystemCallArchitectures=native
-
SystemCallFilter=~ @clock @debug @module @mount @raw-io @reboot @swap @cpu-emulation @obsolete
-
TasksMax=8192
-
TimeoutStopSec
Introduced in systemd 188=5 -
Type=notify
-
User=_dnsdist
-
User=dnsdist
-
-
[Unit]
-
After=network-online.target
-
Description=DNS Loadbalancer
-
Documentation=man:dnsdist(1) https://dnsdist.org
-
Wants=network-online.target
-
Additionnal notes
Nothing here.