[Unit]
Description=AdGuard Home: Network-level blocker
After=network-online.target

[Service]
User=adguardhome
Group=adguardhome
WorkingDirectory=/var/lib/adguardhome
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_RAW
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_RAW
StartLimitInterval=5
StartLimitBurst=10
ExecStart=/usr/bin/AdGuardHome
Restart=always
RestartSec=10

[Install]
WantedBy=multi-user.target