[Unit]
Description=Prometheus exporter for unbound DNS server
Documentation=https://github.com/letsencrypt/unbound_exporter
Wants=network-online.target
After=network-online.target

[Service]
PrivateDevices=true
PrivateTmp=true
PrivateUsers=true
ProtectSystem=full
ProtectHome=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
RestrictRealtime=true
User=prometheus
Group=prometheus
SupplementaryGroups=unbound
EnvironmentFile=-/etc/default/unbound-exporter
ExecStart=/usr/bin/unbound_exporter $ARGS
ExecReload=/bin/kill -HUP $MAINPID
Restart=always
TimeoutStopSec=20s
SendSIGKILL=no

[Install]
WantedBy=multi-user.target
