[Unit]
Description=DNSCrypt-proxy socket
Documentation=https://github.com/DNSCrypt/dnscrypt-proxy/wiki/systemd
Before=nss-lookup.target
Wants=nss-lookup.target

[Socket]
BindToDevice=lo
# Choose this for dnscrypt-proxy as primary resolver
ListenStream=127.0.2.3:10053
ListenDatagram=127.0.2.3:10053

## Below options are valid only for TCP socket.
## Applying them to UDP socket will result in warnings:
## TCP_NODELAY failed: Protocol not available
## TCP_DEFER_ACCEPT failed: Protocol not available
## Those can be safely ignored.
NoDelay=true
DeferAcceptSec=1

[Install]
WantedBy=sockets.target