[Unit]
Description=DNS Maintenance - Graceful drain/restore for mTLS cluster
Documentation=https://github.com/REDITS-GmbH/cert-pki
After=network-online.target apache2.service ssh.service cloudflared.service rsyslog.service wazuh-agent.service systemd-user-sessions.service
Before=shutdown.target reboot.target halt.target poweroff.target
Wants=network-online.target

[Service]
Type=oneshot
RemainAfterExit=yes
EnvironmentFile=/etc/environment
ExecStart=/usr/local/sbin/dns-maintenance restore
ExecStop=/usr/local/sbin/dns-maintenance drain
TimeoutStartSec=300
TimeoutStopSec=660

[Install]
WantedBy=multi-user.target