dnscrypt-proxy2: fix SystemCallFilter

diff --git a/profiles/dnscrypt-proxy2.nix b/profiles/dnscrypt-proxy2.nix
index 5feb91b7486fb56e47dbd390b341a13907e43adb..99f3052221333c3ad4dd8c010d2ba30c511b51b4 100644 (file)
--- a/profiles/dnscrypt-proxy2.nix
+++ b/profiles/dnscrypt-proxy2.nix
@@ -8,9 +8,11 @@ networking = {
   dhcpcd.extraConfig = "nohook resolv.conf";
 };
 systemd.services.dnscrypt-proxy2.serviceConfig.StandardOuput = "journal";
+systemd.services.dnscrypt-proxy2.serviceConfig.SystemCallFilter = [ "@sync" ];
 services.dnscrypt-proxy2 = {
   enable = true;
   # https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml
+  upstreamDefaults = true;
   settings = {
     cache = true;
     disabled_server_names = [