Note that in almost all of my mission critical systems I go out of my way to avoid all networking related stuff in systemd; almost all of it doesn't work right (e.g. the ridiculous DNS resolver proxy mess)