# This file is part of dnscrypt-proxy
# Author: Marguerite Su <i@marguerite.su> with some AUR references.
# Version: 1.7.0
# Description: dnscrypt is a tool that encrypts your DNS queries in order to
#              protect against man-in-the-middle attacks and DNS hijacking
#              (commonly seen in China). It uses CiscoDNS resolvers by default.
#              It is BSD-licensed.
#              In openSUSE it's licensed under SuSE-Permissive (non-free ware).
#              For details, refer to its documentation.
[Unit]
Description=Secure connection between your computer and a DNS resolver
Documentation=man:dnscrypt-proxy(8)
# NTP always has local servers, and there's nothing to encrypt for time.
# and ntp.service isn't native systemd service, if we start before it,
# it will take a long time to sync. just save 20000+ms on boot.
After=network.target ntp.service
Before=nss-lookup.target

[Service]
Type=forking
NonBlocking=true
PIDFile=/var/run/dnscrypt-proxy/dnscrypt-proxy@%i.pid
EnvironmentFile=-/etc/sysconfig/dnscrypt-proxy
ExecStart=/usr/sbin/dnscrypt-proxy \
	--daemonize \
	--pidfile=/var/run/dnscrypt-proxy/dnscrypt-proxy@%i.pid \
	--local-address=%i \
	--user=${DNSCRYPT_USER} \
	--resolver-name=${DNSCRYPT_RESOLVER_NAME} \
	${DNSCRYPT_EPHEMERAL_KEYS} \
	${DNSCRYPT_OPTIONS} \
	--logfile=/var/log/dnscrypt-proxy/dnscrypt-proxy@%i.log \
	--loglevel=${DNSCRYPT_LOGLEVEL}
# Automatically Restart
Restart=on-abort

[Install]
WantedBy=multi-user.target