2016-08-06 16:58:36 +02:00
|
|
|
# This file is part of dnscrypt-proxy
|
|
|
|
|
# Author: Marguerite Su <i@marguerite.su> with some AUR references.
|
|
|
|
|
# Version: 1.7.0
|
|
|
|
|
# Description: dnscrypt is a tool that encrypts your DNS queries in order to
|
|
|
|
|
# protect against man-in-the-middle attacks and DNS hijacking
|
2016-08-13 16:32:32 +02:00
|
|
|
# (commonly seen in China). It uses CiscoDNS resolvers by default.
|
2016-08-06 16:58:36 +02:00
|
|
|
# It is BSD-licensed.
|
|
|
|
|
# In openSUSE it's licensed under SuSE-Permissive (non-free ware).
|
|
|
|
|
# For details, refer to its documentation.
|
|
|
|
|
[Unit]
|
|
|
|
|
Description=Secure connection between your computer and a DNS resolver
|
|
|
|
|
Documentation=man:dnscrypt-proxy(8)
|
|
|
|
|
# NTP always has local servers, and there's nothing to encrypt for time.
|
|
|
|
|
# and ntp.service isn't native systemd service, if we start before it,
|
|
|
|
|
# it will take a long time to sync. just save 20000+ms on boot.
|
2016-08-13 16:32:32 +02:00
|
|
|
After=network.target ntp.service
|
2016-08-06 16:58:36 +02:00
|
|
|
Before=nss-lookup.target
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
Type=forking
|
|
|
|
|
NonBlocking=true
|
2016-08-13 16:32:32 +02:00
|
|
|
PIDFile=/var/run/dnscrypt-proxy/dnscrypt-proxy@%i.pid
|
|
|
|
|
EnvironmentFile=-/etc/sysconfig/dnscrypt-proxy
|
|
|
|
|
ExecStart=/usr/sbin/dnscrypt-proxy \
|
2016-08-06 16:58:36 +02:00
|
|
|
--daemonize \
|
2016-08-13 16:32:32 +02:00
|
|
|
--pidfile=/var/run/dnscrypt-proxy/dnscrypt-proxy@%i.pid \
|
|
|
|
|
--local-address=%i \
|
|
|
|
|
--user=${DNSCRYPT_USER} \
|
|
|
|
|
--resolver-name=${DNSCRYPT_RESOLVER_NAME} \
|
|
|
|
|
${DNSCRYPT_EPHEMERAL_KEYS} \
|
|
|
|
|
${DNSCRYPT_OPTIONS} \
|
|
|
|
|
--logfile=/var/log/dnscrypt-proxy/dnscrypt-proxy@%i.log \
|
|
|
|
|
--loglevel=${DNSCRYPT_LOGLEVEL}
|
2016-08-06 16:58:36 +02:00
|
|
|
# Automatically Restart
|
|
|
|
|
Restart=on-abort
|
|
|
|
|
|
|
|
|
|
[Install]
|
|
|
|
|
WantedBy=multi-user.target
|
