miracle091/dnscrypt-proxy
miracle091
/
dnscrypt-proxy
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Remove systemd examples 

Linux distros and package maintainers know better what works on their
system.
This commit is contained in:
Frank Denis 2018-04-29 20:47:48 +02:00
parent b5693cb28b
commit 039479fa4b
2 changed files with 0 additions and 77 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
systemd/dnscrypt-proxy.service
View File

@ -1,56 +0,0 @@
[Unit]
Description=DNSCrypt-proxy client
Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki
## Use systemd sockets - Do not enable unless you are very familiar with the systemd socket activation mechanism.
## Always try without systemd sockets before reporting any issues related to speed, latency or reliability.
## If you enable this, the `listen_addresses` list in the main configuration file can be empty. Or, at least,
## the addresses it contains should not overlap with the systemd socket addresses.
# Requires=dnscrypt-proxy.socket
## Start service after the network is online.
## Requires a wait service such as NetworkManager or systemd-networkd.
## Verify using:
## systemctl is-enabled NetworkManager-wait-online.service systemd-networkd-wait-online.service
## Then enable:
## systemctl enable NetworkManager-wait-online.service
## Or alternatively:
## systemctl enable systemd-networkd-wait-online.service
After=network-online.target
Wants=network-online.target
## DNSCrypt-proxy provides and requires name resolution.
Before=nss-lookup.target
Wants=nss-lookup.target
[Service]
## Set O_NONBLOCK flag for socket unit.
NonBlocking=true
## Execute dnscrypt-proxy with configuration file.
ExecStart=/usr/bin/dnscrypt-proxy --config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
## Make /home, /root and /run/user inacessible.
ProtectHome=yes
## Make Linux control groups read only.
ProtectControlGroups=yes
## Deny explicit module loading.
ProtectKernelModules=yes
## Run dnscrypt-proxy as unprivileged user with
## temporary assigned UID/GID. See man:systemd.exec
## for more info. Requires systemd 232+.
DynamicUser=yes
CacheDirectory=dnscrypt-proxy
LogsDirectory=dnscrypt-proxy
RuntimeDirectory=dnscrypt-proxy
[Install]
## Install socket unit.
Also=dnscrypt-proxy.socket
## Create symlink for systemd to pull in the unit when starting multi-user.target
## Can be found in /etc/systemd/system/multi-user.target.wants/
WantedBy=multi-user.target

21
systemd/dnscrypt-proxy.socket
View File

@ -1,21 +0,0 @@
[Unit]
Description=DNSCrypt-proxy socket
Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki
[Socket]
## Listen on TCP socket.
ListenStream=127.0.0.1:53
## Listen on UDP socket.
ListenDatagram=127.0.0.1:53
## Below options are valid only for TCP socket.
## Applying them to UDP socket will result in warnings:
## TCP_NODELAY failed: Protocol not available
## TCP_DEFER_ACCEPT failed: Protocol not available
## Those can be safely ignored.
NoDelay=true
DeferAcceptSec=1
[Install]
WantedBy=sockets.target