diff --git a/enforcerd.env b/enforcerd.env
new file mode 100644
index 0000000..c3b41c8
--- /dev/null
+++ b/enforcerd.env
@@ -0,0 +1,2 @@
+IPPLAN_XZ_URL=https://username:password@url/ipplan.db.xz
+STATIC_URL=https://username:password@url/static.yaml
diff --git a/enforcerd.service b/enforcerd.service
new file mode 100644
index 0000000..ff52221
--- /dev/null
+++ b/enforcerd.service
@@ -0,0 +1,17 @@
+[Unit]
+Description=IPplan DNS enforcer
+After=network.target
+Documentation=https://github.com/dhtech/dnsenforcer/
+
+[Service]
+Type=simple
+EnvironmentFile=/etc/dnsenforcer/enforcerd.env
+ExecStart=/usr/local/bin/enforcerd \
+  -cert /var/lib/puppet/ssl/certs/ns0.net.dreamhack.se.pem \
+  -key /var/lib/puppet/ssl/private_keys/ns0.net.dreamhack.se.pem \
+  -zones-file /etc/dnsenforcer/zones.yaml
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+