From 85f05ff9e8c47e6e6613441644859c1c813f1fac Mon Sep 17 00:00:00 2001
From: Rosanna4 <38723523+Rosanna4@users.noreply.github.com>
Date: Sun, 29 Apr 2018 16:18:26 +0100
Subject: [PATCH] systemd: Enhance documentation  (#414)

* systemd: Clarify dnscrypt-proxy.socket documentation

Explain which warnings are expected.

* systemd: Update documentation

TCP_NODELAY warning can be ignored. Fix explanation of ProtectHome=yes behavior.
---
 systemd/dnscrypt-proxy.service | 4 ++--
 systemd/dnscrypt-proxy.socket  | 5 ++++-
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/systemd/dnscrypt-proxy.service b/systemd/dnscrypt-proxy.service
index eb195698..7a4e608c 100644
--- a/systemd/dnscrypt-proxy.service
+++ b/systemd/dnscrypt-proxy.service
@@ -2,7 +2,7 @@
 Description=DNSCrypt-proxy client
 Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki
 
-## Use systemd sockets. Disable on TCP_NODELAY fail. Then define ip address in dnscrypt-proxy.toml.
+## Use systemd sockets.
 Requires=dnscrypt-proxy.socket
 
 ## Start service after the network is online.
@@ -27,7 +27,7 @@ NonBlocking=true
 ## Execute dnscrypt-proxy with configuration file.
 ExecStart=/usr/bin/dnscrypt-proxy --config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
 
-## Make /home, /root and /run/user read only.
+## Make /home, /root and /run/user innacessible.
 ProtectHome=yes
 
 ## Make Linux control groups read only.
diff --git a/systemd/dnscrypt-proxy.socket b/systemd/dnscrypt-proxy.socket
index 965ac28b..bbc057f1 100644
--- a/systemd/dnscrypt-proxy.socket
+++ b/systemd/dnscrypt-proxy.socket
@@ -12,7 +12,10 @@ ListenStream=127.0.0.1:53
 ListenDatagram=127.0.0.1:53
 
 ## Below options are valid only for TCP socket.
-## Applying them to UDP socket will result in error which can be ignored.
+## Applying them to UDP socket will result in warnings:
+## TCP_NODELAY failed: Protocol not available
+## TCP_DEFER_ACCEPT failed: Protocol not available
+## Those can be safely ignored.
 NoDelay=true
 DeferAcceptSec=1