[Unit] Description=opennic-resolve DNS updater Wants=nss-lookup.target After=nss-lookup.target [Service] Type=simple ExecStart=/usr/bin/opennic-resolve ProtectSystem=true ProtectHome=read-only Restart=on-failure RestartSec=1h RuntimeMaxSec=5m