summarylogtreecommitdiffstats
path: root/tcpcryptd.service
diff options
context:
space:
mode:
authorskydrome2019-11-06 04:28:34 -0500
committerskydrome2019-11-06 04:28:34 -0500
commit8ce5c1fd647b3254a1f867f67072cc689543003d (patch)
tree16e08fe24e5ecb8311794fa429b18bfeaf8a5aca /tcpcryptd.service
parent4b1f4c669b8a5979c1106c4304ba14b60b39234a (diff)
downloadaur-tcpcrypt-git.tar.gz
cleanup
Diffstat (limited to 'tcpcryptd.service')
-rw-r--r--tcpcryptd.service13
1 files changed, 5 insertions, 8 deletions
diff --git a/tcpcryptd.service b/tcpcryptd.service
index a9126f634a68..4bfeb575e09e 100644
--- a/tcpcryptd.service
+++ b/tcpcryptd.service
@@ -1,16 +1,13 @@
[Unit]
-Description=User-space implementation of tcpcrypt
+Description=tcpcrypt daemon for automatic transparent encryption of TCP sessions
+Documentation=man:tcpcryptd(8)
After=network.target
[Service]
-Type=simple
EnvironmentFile=/etc/conf.d/tcpcryptd.conf
-ExecStartPre=/usr/sbin/iptables -I INPUT ! --in-interface lo -p tcp --sport $PORT -j NFQUEUE --queue-num $NFQUEUE_NUM
-ExecStartPre=/usr/sbin/iptables -I OUTPUT ! --out-interface lo -p tcp --dport $PORT -j NFQUEUE --queue-num $NFQUEUE_NUM
-ExecStart=/usr/bin/tcpcryptd $OPTS -p $NFQUEUE_NUM
-ExecStopPost=/usr/sbin/iptables -D INPUT ! --in-interface lo -p tcp --sport $PORT -j NFQUEUE --queue-num $NFQUEUE_NUM
-ExecStopPost=/usr/sbin/iptables -D OUTPUT ! --out-interface lo -p tcp --dport $PORT -j NFQUEUE --queue-num $NFQUEUE_NUM
-KillSignal=SIGINT
+ExecStartPre=/usr/share/tcpcryptd/iptables.sh start
+ExecStart=/usr/bin/tcpcryptd -p "$DIVERT_PORT" -U "$DAEMON_USER" -J "$JAIL_DIR" -f -e
+ExecStopPost=/usr/share/tcpcryptd/iptables.sh stop
[Install]
WantedBy=multi-user.target