diff options
| author | Grégoire Duchêne <gduchene@awhk.org> | 2022-01-30 14:38:43 +0000 |
|---|---|---|
| committer | Grégoire Duchêne <gduchene@awhk.org> | 2022-01-30 14:38:43 +0000 |
| commit | 4b8e1c2d7fa7d2260b144d32987b52e0df392fd2 (patch) | |
| tree | 5b003fc2efa1fd71156d76d11a83be7b294ef3f9 /README.md | |
| parent | 3093c4cffa82211fd8ab3a141e54fcf9c10a8012 (diff) | |
Lock down systemd unit definition
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -21,6 +21,10 @@ It is recommended to enable the companion systemd socket and customize it so systemd can start the service when needed and pass the socket to `go-import-redirect`. +If you do not want to use socket activation, you must override the +`IPAddressDeny` and `RestrictAddressFamilies` unit settings to +appropriate values. + Likewise, you must customize the service definition to pass the right flag values. |