Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve the example systemd service file. #1

Merged
merged 3 commits into from
Mar 23, 2024
Merged

Improve the example systemd service file. #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f8aac22
Improve the example systemd service file.
kzemek Mar 23, 2024
ec60c18
wip
kzemek Mar 23, 2024
eced9d3
wip
kzemek Mar 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 4 additions & 7 deletions .github/workflows/test-startup.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,18 +21,15 @@ jobs:
run: go build -v ./...

- name: Install go-mmproxy
run: sudo cp go-mmproxy /usr/bin/go-mmproxy

- name: Add net-prefixes.txt
run: echo 192.168.0.0/16 | sudo tee /usr/share/net-prefixes.txt

- name: Install the systemd service
run: |
sudo cp go-mmproxy /usr/bin/go-mmproxy
sudo mkdir /etc/go-mmproxy
echo 192.168.0.0/16 | sudo tee /etc/go-mmproxy/net-prefixes.txt
sudo cp go-mmproxy.service.example /etc/systemd/system/go-mmproxy.service
sudo systemctl daemon-reload

- name: Start go-mmproxy
run: sudo systemctl start go-mmproxy
run: sudo systemctl start go-mmproxy || sudo systemctl status go-mmproxy.service

- name: Check go-mmproxy status
run: systemctl is-active go-mmproxy
23 changes: 14 additions & 9 deletions go-mmproxy.service.example
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,17 +5,22 @@ After=network.target
[Service]
Type=simple
LimitNOFILE=65535
ExecStartPost=/sbin/ip rule add from 127.0.0.1/8 iif lo table 123
ExecStartPost=/sbin/ip route add local 0.0.0.0/0 dev lo table 123
ExecStartPost=/sbin/ip -6 rule add from ::1/128 iif lo table 123
ExecStartPost=/sbin/ip -6 route add local ::/0 dev lo table 123
ExecStart=/usr/bin/go-mmproxy -4 127.0.0.1:1000 -6 "[::1]:1000" -allowed-subnets /usr/share/net-prefixes.txt -l 0.0.0.0:1234
ExecStopPost=/sbin/ip rule del from 127.0.0.1/8 iif lo table 123
ExecStopPost=/sbin/ip route del local 0.0.0.0/0 dev lo table 123
ExecStopPost=/sbin/ip -6 rule del from ::1/128 iif lo table 123
ExecStopPost=/sbin/ip -6 route del local ::/0 dev lo table 123
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_ADMIN
ExecStartPost=+/sbin/ip rule add from 127.0.0.1/8 iif lo table 123
ExecStartPost=+/sbin/ip route add local 0.0.0.0/0 dev lo table 123
ExecStartPost=+/sbin/ip -6 rule add from ::1/128 iif lo table 123
ExecStartPost=+/sbin/ip -6 route add local ::/0 dev lo table 123
ExecStart=/usr/bin/go-mmproxy -4 127.0.0.1:1000 -6 "[::1]:1000" -allowed-subnets /etc/go-mmproxy/net-prefixes.txt -l 0.0.0.0:1234
ExecStopPost=+/sbin/ip rule del from 127.0.0.1/8 iif lo table 123
ExecStopPost=+/sbin/ip route del local 0.0.0.0/0 dev lo table 123
ExecStopPost=+/sbin/ip -6 rule del from ::1/128 iif lo table 123
ExecStopPost=+/sbin/ip -6 route del local ::/0 dev lo table 123
Restart=on-failure
RestartSec=10s
DynamicUser=yes
ProtectSystem=full
PrivateTmp=true
WorkingDirectory=/tmp

[Install]
WantedBy=multi-user.target
Loading