[Unit] Description=Update of the root trust anchor for DNSSEC validation After=network.target Before=nss-lookup.target Wants=nss-lookup.target Before=unbound.service [Service] Type=oneshot ExecStart=/usr/sbin/unbound-anchor [Install] WantedBy=multi-user.target