This unit is provided by:
Options
-
[Install]
-
[Service]
-
AmbientCapabilities=CAP_NET_BIND_SERVICE
-
CacheDirectory=dnscrypt-proxy
-
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-
DynamicUser=yes
-
ExecStart=/usr/bin/dnscrypt-proxy --config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
-
ExecStart=/usr/sbin/dnscrypt-proxy --config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
-
ExecStart=/usr/sbin/dnscrypt-proxy -config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
-
ExecStartPost=-/bin/bash -c '/bin/echo -n $MAINPID > /run/dnscrypt-proxy/dnscrypt-proxy.pid'
-
Group=dnscrypt
-
LockPersonality
Introduced in systemd 235=yes -
LogsDirectory=dnscrypt-proxy
-
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
NonBlocking=yes
-
PIDFile=/run/dnscrypt-proxy/dnscrypt-proxy.pid
-
PrivateDevices
Introduced in systemd 209=yes -
ProtectControlGroups
Introduced in systemd 232=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
ProtectKernelModules
Introduced in systemd 232=yes -
ProtectKernelTunables
Introduced in systemd 232=yes -
ProtectSystem
Introduced in systemd 214=strict -
RestrictAddressFamilies=AF_INET AF_INET6
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RuntimeDirectory=dnscrypt-proxy
-
StateDirectory=dnscrypt-proxy
-
SystemCallArchitectures=native
-
SystemCallFilter=@system-service ~@resources @privileged @chown
-
User=_dnscrypt-proxy
-
User=dnscrypt
-
WorkingDirectory=~
-
-
[Unit]
-
After=network.target
-
Before=nss-lookup.target
-
Description=DNSCrypt client proxy
-
Description=DNSCrypt-proxy client
-
Documentation=https://github.com/DNSCrypt/dnscrypt-proxy/wiki
-
Documentation=https://github.com/DNSCrypt/dnscrypt-proxy/wiki/systemd file:/usr/share/doc/packages/dnscrypt-proxy/README.openSUSE
-
Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki
-
PartOf=dnscrypt-proxy.socket
-
Requires=dnscrypt-proxy.socket
-
Wants=network-online.target nss-lookup.target
-
Wants=nss-lookup.target
-
Additionnal notes
Nothing here.