# {{ ansible_managed }} [Unit] Description=knot prometheus exporter Wants=network.target Before=alloy.service After=network.target [Service] User=knot ExecStart=/usr/sbin/knot-exporter ReadWritePaths=/run/knot/ ProtectSystem=strict ProtectHome=true PrivateTmp=true PrivateDevices=true PrivateIPC=true