[Unit]
Description=TRUST-DNS server
Wants=network-online.target
After=network-online.target

[Service]
User=named
DynamicUser=yes
ExecStart=/usr/bin/named
AmbientCapabilities=CAP_NET_BIND_SERVICE
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
Restart=on-failure
RestartSec=1

[Install]
WantedBy=multi-user.target