From b20f3367b10aa746fdce413797dab9da25b9ca4d Mon Sep 17 00:00:00 2001 From: Mikaela Suomalainen Date: Wed, 9 Dec 2020 09:38:49 +0200 Subject: [PATCH] systemd/yggdrasil: add mullvad-exclude (& fix chrony override typo) --- .../system/chrony.service.d/mullvad-exclude.conf | 2 +- .../yggdrasil.service.d/mullvad-exclude.conf | 15 +++++++++++++++ 2 files changed, 16 insertions(+), 1 deletion(-) create mode 100644 etc/systemd/system/yggdrasil.service.d/mullvad-exclude.conf diff --git a/etc/systemd/system/chrony.service.d/mullvad-exclude.conf b/etc/systemd/system/chrony.service.d/mullvad-exclude.conf index 838bb3c1..f882db01 100644 --- a/etc/systemd/system/chrony.service.d/mullvad-exclude.conf +++ b/etc/systemd/system/chrony.service.d/mullvad-exclude.conf @@ -8,7 +8,7 @@ After=network.target mullvad-daemon.service [Service] # Wait a minute before actually starting Chrony so Mullvad has surely had # time to start and thus not fail at excluding (cannot set the cgroup, no -# such file or directory +# such file or directory) ExecStartPre=/usr/bin/sleep 60 # Empty the main chrony.service ExecStart line so it can be overwritten ExecStart= diff --git a/etc/systemd/system/yggdrasil.service.d/mullvad-exclude.conf b/etc/systemd/system/yggdrasil.service.d/mullvad-exclude.conf new file mode 100644 index 00000000..b7191f9c --- /dev/null +++ b/etc/systemd/system/yggdrasil.service.d/mullvad-exclude.conf @@ -0,0 +1,15 @@ +# Split-tunneling Yggdrasil outside of Mullvad VPN (won't work without it) + +[Unit] +# Don't start until mullvad-daemon is online to allow excluding +Wants=mullvad-daemon.service +After=network.target mullvad-daemon.service + +[Service] +# Wait a ~minute before actually starting Yggdrasil so Mullvad has surely had +# time to start and thus not fail at excluding (cannot set the cgroup, no +# such file or directory) +ExecStartPre=/usr/bin/sleep 45 +# Empty the main yggdrasil.service ExecStart line so it can be overwritten +ExecStart= +ExecStart=/usr/bin/mullvad-exclude /usr/bin/yggdrasil -useconffile /etc/yggdrasil.conf