miracle091/dnscrypt-proxy
miracle091
/
dnscrypt-proxy
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git
1
0
Fork 0
Code Issues Releases Wiki Activity

systemd: Enhance documentation (#414) 

* systemd: Clarify dnscrypt-proxy.socket documentation

Explain which warnings are expected.

* systemd: Update documentation

TCP_NODELAY warning can be ignored. Fix explanation of ProtectHome=yes behavior.
This commit is contained in:
Rosanna4 2018-04-29 16:18:26 +01:00 committed by Frank Denis
parent dc7645665f
commit 85f05ff9e8
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
systemd/dnscrypt-proxy.service
View File

@ -2,7 +2,7 @@
Description=DNSCrypt-proxy client Description=DNSCrypt-proxy client
Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki
## Use systemd sockets. Disable on TCP_NODELAY fail. Then define ip address in dnscrypt-proxy.toml. ## Use systemd sockets.
Requires=dnscrypt-proxy.socket Requires=dnscrypt-proxy.socket
## Start service after the network is online. ## Start service after the network is online.
@ -27,7 +27,7 @@ NonBlocking=true
## Execute dnscrypt-proxy with configuration file. ## Execute dnscrypt-proxy with configuration file.
ExecStart=/usr/bin/dnscrypt-proxy --config /etc/dnscrypt-proxy/dnscrypt-proxy.toml ExecStart=/usr/bin/dnscrypt-proxy --config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
## Make /home, /root and /run/user read only. ## Make /home, /root and /run/user innacessible.
ProtectHome=yes ProtectHome=yes
## Make Linux control groups read only. ## Make Linux control groups read only.

5
systemd/dnscrypt-proxy.socket
View File

@ -12,7 +12,10 @@ ListenStream=127.0.0.1:53
ListenDatagram=127.0.0.1:53 ListenDatagram=127.0.0.1:53
## Below options are valid only for TCP socket. ## Below options are valid only for TCP socket.
## Applying them to UDP socket will result in error which can be ignored. ## Applying them to UDP socket will result in warnings:
## TCP_NODELAY failed: Protocol not available
## TCP_DEFER_ACCEPT failed: Protocol not available
## Those can be safely ignored.
NoDelay=true NoDelay=true
DeferAcceptSec=1 DeferAcceptSec=1