3 files changed, 12 insertions, 4 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 80e3ef914fce..b9c2ed917376 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -11,7 +11,7 @@ pkgbase = dnsproxy
 	backup = etc/dnsproxy/dnsproxy.yaml
 	source = dnsproxy.service
 	source = https://github.com/AdguardTeam/dnsproxy/archive/v0.50.0.tar.gz
-	sha256sums = 565eea9808589ecafa81f2229ac1f85b39028e26d488a9a7c0b51afc43d7f42b
+	sha256sums = 002deb38e7d69beb8848c57a7ba0d00437c542589baccc6dab074767ffa64b75
 	sha256sums = 23bf3492a8647dadff4c4e999c858f9b715a797cee00a81b439e3175ad76cdce
 
 pkgname = dnsproxy
diff --git a/PKGBUILD b/PKGBUILD
index 5213e8bf4cf9..da8e9c772a9f 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -11,7 +11,7 @@ conflicts=('dnsproxy-bin' 'dnsproxy-adguard')
 source=("dnsproxy.service"
         "https://github.com/AdguardTeam/dnsproxy/archive/v${pkgver}.tar.gz")
 makedepends=("go")
-sha256sums=('565eea9808589ecafa81f2229ac1f85b39028e26d488a9a7c0b51afc43d7f42b'
+sha256sums=('002deb38e7d69beb8848c57a7ba0d00437c542589baccc6dab074767ffa64b75'
             '23bf3492a8647dadff4c4e999c858f9b715a797cee00a81b439e3175ad76cdce')
 
 _conf=etc/dnsproxy/dnsproxy.yaml
diff --git a/dnsproxy.service b/dnsproxy.service
index 34860ff54250..246997888e82 100644
--- a/dnsproxy.service
+++ b/dnsproxy.service
@@ -5,10 +5,18 @@ After=network.target
 Before=network-online.target
 
 [Service]
-AmbientCapabilities=CAP_NET_BIND_SERVICE
+Type=simple
+DynamicUser=true
+WorkingDirectory=/etc/dnsproxy
+ProtectSystem=true
+ProtectHome=true
+PrivateTmp=true
 CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-DynamicUser=yes
+AmbientCapabilities=CAP_NET_BIND_SERVICE
 ExecStart=/usr/bin/dnsproxy --config-path=/etc/dnsproxy/dnsproxy.yaml
+Restart=on-failure
+RestartSec=30
+StartLimitBurst=10
 
 [Install]
 WantedBy=multi-user.target