[Unit]
Description=Linum DNS resolver
Documentation=https://github.com/radhityax/linum
After=network.target
Wants=network.target

[Service]
Type=simple
ExecStart=/usr/bin/linum -config /etc/linum/linum.toml
Restart=on-failure
RestartSec=5
DynamicUser=yes
CacheDirectory=linum
ConfigurationDirectory=linum
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=full
ProtectHome=yes

[Install]
WantedBy=multi-user.target