...
 
Commits (3)
dnscrypt-proxy (2.0.6-2) experimental; urgency=medium
* Fix server_names config parameter
* Disable socket activation and privilege dropping for the moment
-- Eric Dorland <eric@debian.org> Thu, 02 Aug 2018 00:25:04 -0400
dnscrypt-proxy (2.0.6-1) experimental; urgency=medium dnscrypt-proxy (2.0.6-1) experimental; urgency=medium
* New upstream release, go rewrite. (Closes: #814961, #888811) * New upstream release, go rewrite. (Closes: #814961, #888811)
......
[Unit] [Unit]
Description=DNSCrypt client proxy Description=DNSCrypt client proxy
Documentation=man:dnscrypt-proxy(8) Documentation=man:dnscrypt-proxy(8)
Requires=dnscrypt-proxy.socket # Requires=dnscrypt-proxy.socket
After=network.target After=network.target
Before=nss-lookup.target Before=nss-lookup.target
[Install] [Install]
Also=dnscrypt-proxy.socket # Also=dnscrypt-proxy.socket
WantedBy=multi-user.target WantedBy=multi-user.target
[Service] [Service]
Type=simple Type=simple
NonBlocking=true NonBlocking=true
User=_dnscrypt-proxy # Put this back
# User=_dnscrypt-proxy
ExecStart=/usr/sbin/dnscrypt-proxy -config /etc/dnscrypt-proxy/dnscrypt-proxy.toml ExecStart=/usr/sbin/dnscrypt-proxy -config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
Restart=always Restart=always
ProtectSystem=strict #ProtectSystem=strict
ProtectHome=true #ProtectHome=true
ProtectKernelModules=true ProtectKernelModules=true
ProtectKernelTunables=true ProtectKernelTunables=true
ProtectControlGroups=true ProtectControlGroups=true
......
[Unit]
Description=dnscrypt-proxy listening socket
Documentation=man:dnscrypt-proxy(8)
Wants=dnscrypt-proxy-resolvconf.service
[Socket]
ListenStream=127.0.2.1:53
ListenDatagram=127.0.2.1:53
NoDelay=true
DeferAcceptSec=1
[Install]
WantedBy=sockets.target
listen_addresses = ['127.0.2.1:53'] listen_addresses = ['127.0.2.1:53']
servers = ['cloudflare'] server_names = ['cloudflare']
[sources] [sources]
[sources.'public-resolvers'] [sources.'public-resolvers']
......
...@@ -16,9 +16,10 @@ override_dh_auto_install: ...@@ -16,9 +16,10 @@ override_dh_auto_install:
override_dh_install: override_dh_install:
dh_install dh_install
install -m755 -d debian/dnscrypt-proxy/lib/systemd/system # Fix once socket activation is fixed.
install -m644 -p debian/dnscrypt-proxy-resolvconf.service \ # install -m755 -d debian/dnscrypt-proxy/lib/systemd/system
debian/dnscrypt-proxy/lib/systemd/system # install -m644 -p debian/dnscrypt-proxy-resolvconf.service \
# debian/dnscrypt-proxy/lib/systemd/system
override_dh_installinit: override_dh_installinit:
dh_installinit --restart-after-upgrade dh_installinit --restart-after-upgrade
......