[Unit]
Description=Knot DNS Resolver daemon
Documentation=man:kresd(8)

[Service]
Type=simple
WorkingDirectory=/run/kresd
ExecStart=/usr/sbin/kresd -c /etc/kresd/config --forks 1
User=kresd
Restart=on-failure
# CAP_NET_BIND_SERVICE capability is needed for manual service activation
AmbientCapabilities=CAP_NET_BIND_SERVICE

[Install]
WantedBy=multi-user.target