summarylogtreecommitdiffstats
diff options
context:
space:
mode:
authorJohn Fawkes2019-09-24 20:33:59 -0400
committerJohn Fawkes2019-09-24 20:33:59 -0400
commitfffe60bce9b9f4f34fcaaa77e3536a46cc6869ae (patch)
tree257d9646284a039df662cdf82f46971dcfc03d35
parent9647c23bacb31d5eb04c3c4236b63d62ca61a78d (diff)
downloadaur-fffe60bce9b9f4f34fcaaa77e3536a46cc6869ae.tar.gz
update pkgbuild and add systemd files
Signed-off-by: John Fawkes <33303104+JohnFawkes@users.noreply.github.com>
-rw-r--r--PKGBUILD11
-rw-r--r--dnscrypt-proxy.service24
-rw-r--r--dnscrypt-proxy.socket16
3 files changed, 47 insertions, 4 deletions
diff --git a/PKGBUILD b/PKGBUILD
index e57e22226160..f1bbaa54de92 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,6 +1,6 @@
-# Maintainer: Adrián Laviós <adrian@lavios.eu>
+# Maintainer: John Fawkes
pkgname=dnscrypt-proxy-git
-pkgver=2.0.9.r3.g0cca203
+pkgver=2.0.27.r9.bd23ddaa
pkgrel=1
pkgdesc="A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2."
arch=('i686' 'x86_64' 'arm' 'armv6h' 'armv7h' 'aarch64')
@@ -19,6 +19,9 @@ pkgver() {
}
prepare() {
+ cd ../
+ cp dnscrypt-proxy.service "$srcdir/dnscrypt-proxy/dnscrypt-proxy"
+ cp dnscrypt-proxy.socket "$srcdir/dnscrypt-proxy/dnscrypt-proxy"
cd "$srcdir/dnscrypt-proxy/dnscrypt-proxy"
sed -i 's|\['\''127\.0\.0\.1:53'\'', '\''\[::1\]:53'\''\]|\[\]|g' example-dnscrypt-proxy.toml
sed -i 's|'\''dnscrypt-proxy\.log'\''|'\''/var/log/dnscrypt-proxy/dnscrypt-proxy\.log'\''|g' example-dnscrypt-proxy.toml
@@ -59,8 +62,8 @@ package() {
install -Dm644 "example-cloaking-rules.txt" "$pkgdir/usr/share/doc/dnscrypt-proxy/example-cloaking-rules.txt"
install -Dm644 "example-whitelist.txt" "$pkgdir/usr/share/doc/dnscrypt-proxy/example-whitelist.txt"
- install -Dm644 "../systemd/dnscrypt-proxy.service" "$pkgdir/usr/lib/systemd/system/dnscrypt-proxy.service"
- install -Dm644 "../systemd/dnscrypt-proxy.socket" "$pkgdir/usr/lib/systemd/system/dnscrypt-proxy.socket"
+ install -Dm644 "dnscrypt-proxy.service" "$pkgdir/usr/lib/systemd/system/dnscrypt-proxy.service"
+ install -Dm644 "dnscrypt-proxy.socket" "$pkgdir/usr/lib/systemd/system/dnscrypt-proxy.socket"
install -Dm644 "../LICENSE" "$pkgdir/usr/share/licenses/${pkgname}/LICENSE"
}
diff --git a/dnscrypt-proxy.service b/dnscrypt-proxy.service
new file mode 100644
index 000000000000..4a2471a0a3cb
--- /dev/null
+++ b/dnscrypt-proxy.service
@@ -0,0 +1,24 @@
+[Unit]
+Description=DNSCrypt-proxy client
+Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki
+Wants=network-online.target nss-lookup.target
+Before=nss-lookup.target
+
+[Service]
+NonBlocking=true
+ExecStart=/usr/bin/dnscrypt-proxy --config /etc/dnscrypt-proxy/dnscrypt-proxy.toml
+DynamicUser=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectControlGroups=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+LockPersonality=yes
+CacheDirectory=dnscrypt-proxy
+LogsDirectory=dnscrypt-proxy
+RuntimeDirectory=dnscrypt-proxy
+AmbientCapabilities=CAP_NET_BIND_SERVICE
+NoNewPrivileges=yes
+
+[Install]
+WantedBy=multi-user.target
diff --git a/dnscrypt-proxy.socket b/dnscrypt-proxy.socket
new file mode 100644
index 000000000000..af3cebce111c
--- /dev/null
+++ b/dnscrypt-proxy.socket
@@ -0,0 +1,16 @@
+[Unit]
+Description=DNSCrypt-proxy socket
+Documentation=https://github.com/jedisct1/dnscrypt-proxy/wiki
+Before=nss-lookup.target
+Wants=nss-lookup.target network-online.target
+
+[Socket]
+ListenStream=127.0.0.1:53
+ListenDatagram=127.0.0.1:53
+ListenStream=[::1]:53
+ListenDatagram=[::1]:53
+NoDelay=true
+DeferAcceptSec=1
+
+[Install]
+WantedBy=sockets.target