Hello,
I've made some adjustments to the alfis systemd service file. I'm saving the configuration in /etc/alfis/alfis.conf. This not only allows me to better isolate alfis from a security standpoint, but also to store keys directly in /etc/alfis.
Unfortunately, alfis overwrites this file after every update - which prevents my DNS service (CoreDNS) from starting, since alfis binds to port 53 first.
I would like alfis to consider the following measures:
- Place the systemd service file in
/usr/lib/systemd/system/alfis.service instead of /etc/systemd/system/alfis.service. Packages typically install their systemd units in /usr/lib/systemd, not /etc/systemd. This allows admins to override service units by placing them in /etc.
- In the future, the Alfis systemd unit should use
/etc/alfis/alfis.conf itself.
Hello,
I've made some adjustments to the alfis systemd service file. I'm saving the configuration in
/etc/alfis/alfis.conf. This not only allows me to better isolate alfis from a security standpoint, but also to store keys directly in/etc/alfis.Unfortunately, alfis overwrites this file after every update - which prevents my DNS service (CoreDNS) from starting, since alfis binds to port 53 first.
I would like alfis to consider the following measures:
/usr/lib/systemd/system/alfis.serviceinstead of/etc/systemd/system/alfis.service. Packages typically install their systemd units in/usr/lib/systemd, not/etc/systemd. This allows admins to override service units by placing them in/etc./etc/alfis/alfis.confitself.