sing-box/release/config/sing-box@.service

[Unit]
Description=sing-box service
Documentation=https://sing-box.sagernet.org
After=network.target nss-lookup.target network-online.target

[Service]
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH
ExecStart=/usr/bin/sing-box -D /var/lib/sing-box-%i -c /etc/sing-box/%i.json run
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
RestartSec=10s
LimitNOFILE=infinity

[Install]
WantedBy=multi-user.target
Improve build 2022-08-12 22:53:46 +08:00			`[Unit]`
			`Description=sing-box service`
			`Documentation=https://sing-box.sagernet.org`
Add network-online.target in .service files This helps the daemon work better on IoT devices like RaspberryPi. According to systemd's documentation, `network.target` means there has already been a network manager started, but the network may not be "up". On most PCs this does not matter because the network will turn to "up" almost immidiately. The IoT devices' network interface may not be set up quickly enough, so they may meet that the sing-box daemon is started before network is ready, which results that sing-box cannot find a working route. The workaround of this is restarting sing-box daemon but it absolutely is not the perfect solution. As `network-online.target` must be triggered by network manager after you configured it, I keep `network.target` so there will be no change to those who do not enabled proper trigger service like `NetworkManager-wait-online.service`. See also: https://systemd.io/NETWORK_ONLINE/ 2024-01-14 13:05:44 +08:00			`After=network.target nss-lookup.target network-online.target`
Improve build 2022-08-12 22:53:46 +08:00
			`[Service]`
Fix systemd service caps for process sniffing 2023-02-09 13:30:43 +08:00			`CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH`
			`AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH`
Update release scripts 2023-03-29 13:23:18 +08:00			`ExecStart=/usr/bin/sing-box -D /var/lib/sing-box-%i -c /etc/sing-box/%i.json run`
systemd: Add reload command 2023-03-06 16:11:12 +08:00			`ExecReload=/bin/kill -HUP $MAINPID`
Improve build 2022-08-12 22:53:46 +08:00			`Restart=on-failure`
			`RestartSec=10s`
			`LimitNOFILE=infinity`

			`[Install]`
			`WantedBy=multi-user.target`