diff --git a/systemd/dnscrypt-proxy.service b/systemd/dnscrypt-proxy.service index eb195698..7a4e608c 100644 --- a/systemd/dnscrypt-proxy.service +++ b/systemd/dnscrypt-proxy.service @@ -2,7 +2,7 @@ Description=DNSCrypt-proxy client Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki -## Use systemd sockets. Disable on TCP_NODELAY fail. Then define ip address in dnscrypt-proxy.toml. +## Use systemd sockets. Requires=dnscrypt-proxy.socket ## Start service after the network is online. @@ -27,7 +27,7 @@ NonBlocking=true ## Execute dnscrypt-proxy with configuration file. ExecStart=/usr/bin/dnscrypt-proxy --config /etc/dnscrypt-proxy/dnscrypt-proxy.toml -## Make /home, /root and /run/user read only. +## Make /home, /root and /run/user innacessible. ProtectHome=yes ## Make Linux control groups read only. diff --git a/systemd/dnscrypt-proxy.socket b/systemd/dnscrypt-proxy.socket index 965ac28b..bbc057f1 100644 --- a/systemd/dnscrypt-proxy.socket +++ b/systemd/dnscrypt-proxy.socket @@ -12,7 +12,10 @@ ListenStream=127.0.0.1:53 ListenDatagram=127.0.0.1:53 ## Below options are valid only for TCP socket. -## Applying them to UDP socket will result in error which can be ignored. +## Applying them to UDP socket will result in warnings: +## TCP_NODELAY failed: Protocol not available +## TCP_DEFER_ACCEPT failed: Protocol not available +## Those can be safely ignored. NoDelay=true DeferAcceptSec=1