[Unit] Description=DNS-over-HTTPS Client After=network.target [Service] AmbientCapabilities=CAP_NET_BIND_SERVICE ExecStart=/usr/local/bin/doh-client -addr 127.0.0.1:53 -upstream https://dns.google.com/resolve -bootstrap 8.8.8.8:53,8.8.4.4:53 LimitNOFILE=1048576 Restart=always RestartSec=3 Type=simple User=nobody [Install] WantedBy=multi-user.target