summarylogtreecommitdiffstats
path: root/acme-dns.service
diff options
context:
space:
mode:
authorlf2018-11-07 04:41:21 +0000
committerlf2018-11-07 04:41:21 +0000
commit4bd44ab91178f8ecb348c8e38d795f888346f79a (patch)
tree8379ed1fb65ca3ab6b6f32f78d1e7a4cbb8eabe3 /acme-dns.service
downloadaur-4bd44ab91178f8ecb348c8e38d795f888346f79a.tar.gz
Initial commit
Diffstat (limited to 'acme-dns.service')
-rw-r--r--acme-dns.service18
1 files changed, 18 insertions, 0 deletions
diff --git a/acme-dns.service b/acme-dns.service
new file mode 100644
index 000000000000..bb3e95c9c112
--- /dev/null
+++ b/acme-dns.service
@@ -0,0 +1,18 @@
+[Unit]
+Description=Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely
+After=network.target
+
+[Service]
+User=acme-dns
+Group=acme-dns
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+ExecStart=/usr/bin/acme-dns
+Restart=on-failure
+
+SystemCallArchitecture=native
+RestrictAddressFamilies=AF_INET AF_INET6
+SystemCallFilter=@system-service
+PrivateTmp=yes
+
+[Install]
+WantedBy=multi-user.target