[Unit]
Description=DNS Zone List Server for DNS Editor
After=network.target named.service

[Service]
Type=simple
# HTTP (recommended - simple setup, disable service after use)
ExecStart=/usr/bin/python3 /usr/local/bin/zone_server.py --port 8053 --bind 0.0.0.0
# HTTPS with Let's Encrypt certificates (optional)
# Update the --cert-dir path to match your certificate location
#ExecStart=/usr/bin/python3 /usr/local/bin/zone_server.py --port 443 --bind 0.0.0.0 --cert-dir /etc/letsencrypt/live/YOUR_DOMAIN
Restart=on-failure
RestartSec=5
User=root

# Security hardening
NoNewPrivileges=true
ProtectSystem=full
ProtectHome=true
PrivateTmp=true
# Allow reading Let's Encrypt certificates (only needed for HTTPS)
#ReadOnlyPaths=/etc/letsencrypt

[Install]
WantedBy=multi-user.target