This unit is provided by:
Options
-
[Service]
-
CapabilityBoundingSet=
-
DynamicUser=yes
-
ExecStart=/usr/bin/doh-proxy '--server-address=127.0.0.1:53'
-
LockPersonality
Introduced in systemd 235=yes -
MemoryDenyWriteExecute
Introduced in systemd 231=yes -
NoNewPrivileges
Introduced in systemd 239=yes -
ProtectClock
Introduced in systemd 245=yes -
ProtectHome
Introduced in systemd 214=yes -
ProtectHostname
Introduced in systemd 242=yes -
ProtectKernelLogs
Introduced in systemd 244=yes -
RemoveIPC
Introduced in systemd 232=yes -
Restart=always
-
RestartSec=10
-
RestrictAddressFamilies=AF_INET AF_INET6
-
RestrictNamespaces
Introduced in systemd 233=yes -
RestrictRealtime
Introduced in systemd 231=yes -
RestrictSUIDSGID
Introduced in systemd 242=yes -
SystemCallArchitectures=native
-
SystemCallErrorNumber=EPERM
-
SystemCallFilter=@system-service ~@privileged @resources
-
-
[Unit]
-
After=network.target nss-lookup.target
-
Description=doh-proxy-rust
-
Additionnal notes
Nothing here.