mirror of
https://github.com/ilyakooo0/nixpkgs.git
synced 2024-12-29 14:57:28 +03:00
Merge pull request #100060 from aanderse/dnsdist
nixos/dnsdist: use upstream systemd unit
This commit is contained in:
commit
9b6fc07d15
@ -35,25 +35,18 @@ in {
|
||||
};
|
||||
};
|
||||
|
||||
config = mkIf config.services.dnsdist.enable {
|
||||
config = mkIf cfg.enable {
|
||||
systemd.packages = [ pkgs.dnsdist ];
|
||||
|
||||
systemd.services.dnsdist = {
|
||||
description = "dnsdist load balancer";
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
after = ["network.target"];
|
||||
|
||||
serviceConfig = {
|
||||
Restart="on-failure";
|
||||
RestartSec="1";
|
||||
DynamicUser = true;
|
||||
StartLimitInterval="0";
|
||||
PrivateDevices=true;
|
||||
AmbientCapabilities="CAP_NET_BIND_SERVICE";
|
||||
CapabilityBoundingSet="CAP_NET_BIND_SERVICE";
|
||||
ExecStart = "${pkgs.dnsdist}/bin/dnsdist --supervised --disable-syslog --config ${configFile}";
|
||||
ProtectHome=true;
|
||||
RestrictAddressFamilies="AF_UNIX AF_INET AF_INET6";
|
||||
LimitNOFILE="16384";
|
||||
TasksMax="8192";
|
||||
|
||||
# upstream overrides for better nixos compatibility
|
||||
ExecStartPre = [ "" "${pkgs.dnsdist}/bin/dnsdist --check-config --config ${configFile}" ];
|
||||
ExecStart = [ "" "${pkgs.dnsdist}/bin/dnsdist --supervised --disable-syslog --config ${configFile}" ];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
Loading…
Reference in New Issue
Block a user