- Fix #1317: Unbound starts too early. Add

Wants=network-online.target under [Unit] in unbound.service.

contrib/unbound.service.in

@@ -38,11 +38,17 @@
 ;   - `LockPersonality=yes` locks down the personality system call so that the
 ;     kernel execution domain may not be changed from the default.
 ;
+;   - With /etc/systemd/system/*.network a setting to make sure the network
+;     is not considered online too early, can reduce network unreachable
+;     errors on server start:
+;     [Link]
+;     RequiredForOnline=routable
 ;
 [Unit]
 Description=Validating, recursive, and caching DNS resolver
 Documentation=man:unbound(8)
 After=network-online.target
+Wants=network-online.target
 Before=nss-lookup.target
 
 [Install]

doc/Changelog

@@ -1,6 +1,8 @@
 21 August 2025: Wouter
 	- Fix to check for extraneous command arguments for unbound-control,
 	  when the command takes no arguments but there are arguments present.
+	- Fix #1317: Unbound starts too early. Add
+	  Wants=network-online.target under [Unit] in unbound.service.
 
 15 August 2025: Wouter
 	- unbound-control cache_lookup +t allows tld and root names. And