dnscrypt-proxy manual config management

[audun]

I'm using dnscrypt-proxy on 24.7.1, and for a long time I've elected to update /usr/local/etc/dnscrypt-proxy/dnscrypt-proxy.toml manually, since I've always found the web-ui under "Services" for this plugin pretty unreliable.

This worked fine for a long time, restarting or even rebooting the router won't clobber the file on disk, but I recently noticed that I think system updates does clobber the file to what is set in the web-ui, which is not what I want.

Ideally, I'd just like to disable the web-ui completely for this service, but there doesn't seem to be an option for it.

I've now tried to set dnscrypt-proxy.toml to read-only, but since I can still edit it as root, I'm not sure if this will help with it being "fixed" on system updates.

I've saved a backup of the file in the same folder so it's mostly an annoyance, but does anyone know if it's possible to somehow just let the service know it shouldn't handle the config file from the web-ui for me?

[franco]

Remove os-dnscrypt-proxy from GUI, install dnscrypt-proxy2 package from shell.


Cheers,
Franco

[audun]

All right, I removed os-dnscrypt-proxy from the gui which also removes dnscrypt-proxy2, I then reinstalled dnscrypt-proxy2 from shell with "pkg install". All the config files were still there, so just had to do "service dnscrypt-proxy start". I’m getting an error when starting the service though, but it doesn’t seem to affect the functionality:

# service dnscrypt-proxy start
eval: /usr/local/opnsense/scripts/OPNsense/Dnscryptproxy/setup.sh: not found
/usr/local/etc/rc.d/dnscrypt-proxy: WARNING: failed to setup dnscrypt_proxy
Starting dnscrypt_proxy.

This seems to come from this default entry in /etc/rc.conf.d/dnscrypt_proxy:

dnscrypt_proxy_setup="/usr/local/opnsense/scripts/OPNsense/Dnscryptproxy/setup.sh"

This variable is not mentioned in /usr/local/etc/rc.d/dnscrypt-proxy so I’m not sure what the purpose of it is, I’ve commented it out for now. Maybe *_setup is just some kind of rc convention, I'm not that used to FreeBSD 

[franco]

Remove dnscrypt_proxy_setup, it's a remnant from the plugin.


Cheers,
Franco