add socks-relay.service and /etc/default/socks-relay config

4 files changed, 65 insertions, 6 deletions

diff --git a/.SRCINFO b/.SRCINFO
index 9464aa5454a9..999c0b92ed5c 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,12 +1,16 @@
 pkgbase = socks-relay
 	pkgdesc = Simple socks5 server and relay
 	pkgver = 1.0.1
-	pkgrel = 1
+	pkgrel = 2
 	url = https://github.com/guillon/socks-relay
-	arch = x86_64
+	arch = any
 	license = MIT
 	depends = python-pysocks
 	source = https://github.com/guillon/socks-relay/archive/refs/tags/v1.0.1.zip
+	source = socks-relay.service
+	source = socks-relay.conf
 	sha256sums = 59e02359aa61caab1ff4504df64da91d1a43eea419479d82ed530fef26ffb58a
+	sha256sums = bf8d23266ea286a4ff1e1633e795aa632a9c7abf20b1ffcd026f60089e5d38e7
+	sha256sums = 225d0a8e2be6f00158be07591373c5da1f486083f1163b8c89613b0f3548e0c0
 
 pkgname = socks-relay
diff --git a/PKGBUILD b/PKGBUILD
index ae5f8f8f9d28..70e974accd42 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,15 +1,23 @@
 pkgname=socks-relay
 pkgver=1.0.1
-pkgrel=1
+pkgrel=2
 pkgdesc="Simple socks5 server and relay"
-arch=(x86_64)
+arch=('any')
 url="https://github.com/guillon/socks-relay"
 license=('MIT')
 depends=('python-pysocks')
-source=("https://github.com/guillon/socks-relay/archive/refs/tags/v${pkgver}.zip")
-sha256sums=('59e02359aa61caab1ff4504df64da91d1a43eea419479d82ed530fef26ffb58a')
+source=(
+  "https://github.com/guillon/socks-relay/archive/refs/tags/v${pkgver}.zip"
+  "socks-relay.service"
+  "socks-relay.conf")
+sha256sums=(
+  '59e02359aa61caab1ff4504df64da91d1a43eea419479d82ed530fef26ffb58a'
+  'bf8d23266ea286a4ff1e1633e795aa632a9c7abf20b1ffcd026f60089e5d38e7'
+  '225d0a8e2be6f00158be07591373c5da1f486083f1163b8c89613b0f3548e0c0')
 
 package() {
     mkdir -p "${pkgdir}/usr/bin"
     install -Dm755 $srcdir/socks-relay-${pkgver}/socks-relay.py "${pkgdir}/usr/bin/socks-relay"
+    install -Dm644 "socks-relay.service" -t ${pkgdir}/usr/lib/systemd/system/
+    install -Dm600 "socks-relay.conf" ${pkgdir}/etc/default/socks-relay
 }
diff --git a/socks-relay.conf b/socks-relay.conf
new file mode 100644
index 000000000000..1abddd92ab5e
--- /dev/null
+++ b/socks-relay.conf
@@ -0,0 +1,8 @@
+#SERVER_USER=user1
+#SERVER_PASSWORD=password1
+#SOCKS5_SERVER=socks.example.org:1080
+#SOCKS5_USER=user2
+#SOCKS5_PASSWORD=password2
+#SERVER_CLIENTS_ALLOWED=
+#SERVER_CLIENTS_REFUSED=
+#SERVER_RESOLVE_MAP=
diff --git a/socks-relay.service b/socks-relay.service
new file mode 100644
index 000000000000..cdcda03bb553
--- /dev/null
+++ b/socks-relay.service
@@ -0,0 +1,39 @@
+[Unit] 
+Description=Simple socks5 server and relay
+After=network.target
+StartLimitIntervalSec=1300
+
+[Service] 
+Type=simple
+DynamicUser=true
+
+EnvironmentFile=/etc/default/socks-relay
+ExecStart=/usr/bin/socks-relay localhost:8999
+
+Restart=always
+RestartSec=10s
+
+LimitNOFILE=1024
+LimitNPROC=32
+
+ProtectHome=true
+PrivateDevices=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+
+RestrictNamespaces=true
+
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+RestrictAddressFamilies=AF_INET AF_INET6
+
+LockPersonality=true
+RestrictRealtime=true
+
+[Install] 
+WantedBy=multi-user.target
\ No newline at end of file