[Unit]
Description=Update dyndns using {{ hostvars[dyndns.server].host_name }}.{{ hostvars[dyndns.server].host_domain }}

[Service]
Type=oneshot
ExecStart=/usr/bin/ssh -4 {{ hostvars[dyndns.server].host_name }}.{{ hostvars[dyndns.server].host_domain }} {{ dyndns_client_id }}
User=dyndns
Group=dyndns
Nice=19
CapabilityBoundingSet=CAP_CHOWN CAP_NET_BIND_SERVICE
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
RestrictRealtime=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6