[Unit]
Description=FreeIPA Server with Integrated DNS
After=network-online.target

[Container]
Image=gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:fedora-rawhide-4.13.1
ContainerName=freeipa
HostName=ipa.iot.cudanet.org

# Network Configuration
Network=podman-bridge0
IP=10.0.0.141
PublishPort=53/udp
PublishPort=53/tcp
PublishPort=80/tcp
PublishPort=443/tcp
PublishPort=389/tcp
PublishPort=636/tcp
PublishPort=88/tcp
PublishPort=88/udp
PublishPort=464/tcp
PublishPort=464/udp
PublishPort=123/udp

# Security and Resources
ReadOnly=true
Sysctl=net.ipv4.ip_unprivileged_port_start=53
Memory=4096m
Volume=/var/podman/freeipa/data:/data:Z

# Arguments
# Added --setup-dns and --forwarder (using common public DNS as examples)
Exec=-U -n iot.cudanet.org -r IOT.CUDANET.ORG --hostname=ipa.iot.cudanet.org --setup-dns --forwarder=8.8.8.8 --forwarder=1.1.1.1 --no-host-dns --no-ntp -p e9532a79-417c-4689-b89e-fa9b61b40d4a -a e9532a79-417c-4689-b89e-fa9b61b40d4a --ip-address=10.0.0.141

[Service]
Restart=always

[Install]
WantedBy=multi-user.target default.target