miracle091/dnscrypt-proxy
miracle091
/
dnscrypt-proxy
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git
1
0
Fork 0
Code Issues Releases Wiki Activity
dnscrypt-proxy/systemd/dnscrypt-proxy.socket

15 lines
281 B
SYSTEMD
Raw Normal View History

systemd support How does it work? I don't know. Does it work? I don't know. Would I encourage its use? No.
2018-01-24 14:44:32 +01:00
[Unit]
Adding DynamicUser to systemd service file, enhancing socket and service (#261) * Adding nss-lookup.target to the socket Before and Wants directive. Adding current upstream wiki as documentation to service and socket file. Adding DynamicUser=yes to the service file, alongside various hardening settings (Protect{ControlGroups,KernelModules}. Allowing the service to bind to ports below 1024 by setting CAP_NET_BIND_SERVICE. Adding {Cache,Logs,Runtime}Directory for dnscrypt-proxy. Removing (default) Type=simple. Adding a more default ExecStart location and usage of configuration. * systemd/dnscrypt-proxy.socket: Adding back ipv6 functionality. * systemd/dnscrypt-proxy.service: Updating Description to match project name. Explicitely setting ProtectHome=yes. Adding information on the DynamicUser settings. * systemd/dnscrypt-proxy.socket: Updating description to match project name. * systemd/dnscrypt-proxy.service: Adding Requires= and Also= for dnscrypt-proxy.socket in favor of CAP_NET_BIND_SERVICE capabilities. * dnscrypt-proxy/example-dnscrypt-proxy.toml: Clarifying how to set listen_addresses, when using systemd socket activation.
2018-03-26 20:48:22 +02:00
Description=DNSCrypt-proxy socket
Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki
dnscrypt-proxy.socket: update [Unit] dependencies to match those from service (#260)
2018-03-24 19:05:01 +01:00
Before=nss-lookup.target
Wants=nss-lookup.target
systemd support How does it work? I don't know. Does it work? I don't know. Would I encourage its use? No.
2018-01-24 14:44:32 +01:00
[Socket]
ListenStream=127.0.0.1:53
ListenDatagram=127.0.0.1:53
NoDelay=true
DeferAcceptSec=1
[Install]
WantedBy=sockets.target