fix #171, #153

docs/content/advance/customize-protocol-stack.md

@@ -147,6 +147,8 @@ inbound:
     - protocol: tls
       tag: tls
       config:
+        remote-addr: 127.0.0.1
+        remote-port: 80
         ssl:
           sni: localhost
           key: server.key
@@ -155,12 +157,16 @@ inbound:
     - protocol: trojan
       tag: trojan1
       config:
+        remote-addr: 127.0.0.1
+        remote-port: 80
         password:
           - 12345678
 
     - protocol: trojan
       tag: trojan2
       config:
+        remote-addr: 127.0.0.1
+        remote-port: 80
         password:
           - 87654321
 

example/trojan-go.service

@@ -1,12 +1,13 @@
 [Unit]
 Description=Trojan-Go - An unidentifiable mechanism that helps you bypass GFW
 Documentation=https://p4gefau1t.github.io/trojan-go/
-After=network.target network-online.target nss-lookup.target mysql.service mariadb.service mysqld.service
-Wants=network-online.target
+After=network.target nss-lookup.target
 
 [Service]
-Type=simple
 User=nobody
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
+AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
+NoNewPrivileges=true
 ExecStart=/usr/bin/trojan-go -config /etc/trojan-go/config.json
 Restart=on-failure
 RestartSec=10s

example/trojan-go@.service

@@ -1,16 +1,14 @@
 [Unit]
 Description=Trojan-Go - An unidentifiable mechanism that helps you bypass GFW
 Documentation=https://p4gefau1t.github.io/trojan-go/
-After=network.target network-online.target nss-lookup.target mysql.service mariadb.service mysqld.service
-Wants=network-online.target
+After=network.target nss-lookup.target
 
 [Service]
-Type=simple
-StandardError=journal
 User=nobody
-AmbientCapabilities=CAP_NET_BIND_SERVICE
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
+AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE
+NoNewPrivileges=true
 ExecStart=/usr/bin/trojan-go -config /etc/trojan-go/%i.json
-ExecReload=/bin/kill -HUP $MAINPID
 Restart=on-failure
 RestartSec=10s