From 4b8e1c2d7fa7d2260b144d32987b52e0df392fd2 Mon Sep 17 00:00:00 2001
From: Grégoire Duchêne <gduchene@awhk.org>
Date: Sun, 30 Jan 2022 14:38:43 +0000
Subject: Lock down systemd unit definition

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'README.md')

diff --git a/README.md b/README.md
index a3e6e4a..5412c96 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,10 @@ It is recommended to enable the companion systemd socket and customize
 it so systemd can start the service when needed and pass the socket to
 `go-import-redirect`.
 
+If you do not want to use socket activation, you must override the
+`IPAddressDeny` and `RestrictAddressFamilies` unit settings to
+appropriate values.
+
 Likewise, you must customize the service definition to pass the right
 flag values.
 
-- 
cgit v1.2.3-70-g09d2