mirror of
https://github.com/DNSCrypt/dnscrypt-proxy.git
synced 2025-03-04 10:24:40 +01:00
fa2c95084e
* Adding nss-lookup.target to the socket Before and Wants directive. Adding current upstream wiki as documentation to service and socket file.
Adding DynamicUser=yes to the service file, alongside various hardening settings (Protect{ControlGroups,KernelModules}. Allowing the service to bind to ports below 1024 by setting CAP_NET_BIND_SERVICE. Adding {Cache,Logs,Runtime}Directory for dnscrypt-proxy. Removing (default) Type=simple. Adding a more default ExecStart location and usage of configuration.
* systemd/dnscrypt-proxy.socket: Adding back ipv6 functionality.
* systemd/dnscrypt-proxy.service: Updating Description to match project name.
Explicitely setting ProtectHome=yes. Adding information on the DynamicUser settings.
* systemd/dnscrypt-proxy.socket: Updating description to match project name.
* systemd/dnscrypt-proxy.service: Adding Requires= and Also= for dnscrypt-proxy.socket in favor of CAP_NET_BIND_SERVICE capabilities.
* dnscrypt-proxy/example-dnscrypt-proxy.toml: Clarifying how to set listen_addresses, when using systemd socket activation.
|
||
|---|---|---|
| .. | ||
| common.go | ||
| config.go | ||
| crypto.go | ||
| daemonize.go | ||
| daemonize_placeholder.go | ||
| dnscrypt_certs.go | ||
| dnsutils.go | ||
| estimators.go | ||
| example-blacklist.txt | ||
| example-cloaking-rules.txt | ||
| example-dnscrypt-proxy.toml | ||
| example-forwarding-rules.txt | ||
| main.go | ||
| plugin_block_ip.go | ||
| plugin_block_ipv6.go | ||
| plugin_block_name.go | ||
| plugin_cache.go | ||
| plugin_cloak.go | ||
| plugin_forward.go | ||
| plugin_get_set_payload_size.go | ||
| plugin_nx_log.go | ||
| plugin_query_log.go | ||
| plugins.go | ||
| proxy.go | ||
| resolve.go | ||
| serversInfo.go | ||
| sources.go | ||
| stamps.go | ||
| systemd_free.go | ||
| systemd_linux.go | ||
| xtransport.go | ||