[Unit]
Description=AdGuard Home: Network-level blocker
ConditionFileIsExecutable=/opt/adguard/AdGuardHome

After=syslog.target network-online.target

[Service]
ExecStartPre=+/usr/sbin/setcap "CAP_NET_BIND_SERVICE=+eip CAP_NET_RAW=+eip" /opt/adguard/AdGuardHome
ExecStartPre=+/usr/sbin/chown -R adguard:adguard /etc/adguard /opt/adguard
ExecStartPost=+/usr/sbin/chown -R adguard:adguard /etc/adguard /opt/adguard
# First run must run as root
# And uncomment + restart service after first init
#User=adguard
#Group=adguard
StartLimitInterval=5
StartLimitBurst=10
ExecStart=/opt/adguard/AdGuardHome "-s" "run" "-c" "/etc/adguard/adguard.yaml"

WorkingDirectory=/opt/adguard

StandardOutput=journal
StandardError=journal

Restart=always

RestartSec=10
EnvironmentFile=-/etc/sysconfig/AdGuardHome

[Install]
WantedBy=multi-user.target