pdns-recursor@.service

This unit is provided by:

• https://archlinux.org/packages/community/x86_64/powerdns-recursor/

• https://packages.debian.org/unstable/pdns-recursor

• https://packages.fedoraproject.org/pkgs/pdns-recursor/

• https://software.opensuse.org/package/pdns-recursor

Options

• [Install]
  • WantedBy=multi-user.target
• [Service]
  • AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
  • CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
  • ExecStart=/usr/bin/pdns_recursor --config-name=%i --daemon=no --write-pid=no --disable-syslog --log-timestamp=no
  • ExecStart=/usr/sbin/pdns_recursor --config-name=%i --daemon=no --write-pid=no --disable-syslog --log-timestamp=no
  • Group=pdns
  • Group=pdns-recursor
  • LimitNOFILE=16384
  • LockPersonality
    Introduced in systemd 235
    =yes
  • NoNewPrivileges
    Introduced in systemd 239
    =yes
  • PrivateDevices
    Introduced in systemd 209
    =yes
  • PrivateTmp=yes
  • ProtectClock
    Introduced in systemd 245
    =yes
  • ProtectControlGroups
    Introduced in systemd 232
    =yes
  • ProtectHome
    Introduced in systemd 214
    =yes
  • ProtectHostname
    Introduced in systemd 242
    =yes
  • ProtectKernelLogs
    Introduced in systemd 244
    =yes
  • ProtectKernelModules
    Introduced in systemd 232
    =yes
  • ProtectKernelTunables
    Introduced in systemd 232
    =yes
  • ProtectSystem
    Introduced in systemd 214
    =full
  • Restart=on-failure
  • RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
  • RestrictNamespaces
    Introduced in systemd 233
    =yes
  • RestrictRealtime
    Introduced in systemd 231
    =yes
  • RestrictSUIDSGID
    Introduced in systemd 242
    =yes
  • RuntimeDirectory=pdns-recursor-%i
  • StartLimitInterval=0
  • SyslogIdentifier=pdns-recursor-%i
  • SystemCallArchitectures=native
  • SystemCallFilter=~ @clock @debug @module @mount @raw-io @reboot @swap @cpu-emulation @obsolete
  • Type=notify
  • User=pdns
  • User=pdns-recursor
• [Unit]
  • After=network-online.target
  • Before=nss-lookup.target
  • Description=PowerDNS Recursor %i
  • Documentation=man:pdns_recursor(1) man:rec_control(1) https://doc.powerdns.com
  • Wants=network-online.target nss-lookup.target

Additionnal notes

Nothing here.