nixos: additional hardening for dnscrypt-proxy

- Run as unprivileged user/group via systemd, obviating the need to specify capabilities, etc. - Run with private tmp and minimal device name space
2015-06-12 15:12:33 +02:00
parent 823bb5dd4d
commit a88a6bc676
2 changed files with 22 additions and 28 deletions
@@ -376,7 +376,7 @@
      seeks = 148;
      prosody = 149;
      i2pd = 150;
-      #dnscrypt-proxy = 151; # unused
+      dnscrypt-proxy = 151;
      systemd-network = 152;
      systemd-resolve = 153;
      systemd-timesync = 154;