[Unit]
Description=Fast and lightweight DNS proxy as ad-blocker
Documentation=https://0xerr0r.github.io/blocky/
After=network-online.target
Wants=network-online.target

[Service]
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
NoNewPrivileges=true
User=blocky
ExecStart=/usr/bin/blocky --config /etc/blocky/config.yml
Restart=on-failure

[Install]
WantedBy=multi-user.target