doc/kresd.systemd: bind to all interfaces with kresd.socket

diff --git a/daemon/README.rst b/daemon/README.rst
index 51f95febec4f7e23684895d6cf4a24d05560015d..7bede346c7ba84ee8d137df4a7748df18bdd9921 100644 (file)
--- a/daemon/README.rst
+++ b/daemon/README.rst
@@ -413,7 +413,23 @@ To configure kresd to listen on public interface, create a drop-in file:
 
 .. _kresd-socket-override-port:
 
-The default port can also be overriden by using an empty ``ListenDatagram=`` or ``ListenStream=`` directive. This can be useful if you want to use the Knot DNS with the `dnsproxy module`_ to have both resolver and authoritative server running on the same machine.
+The default locahost interface/port can also be removed/overriden by using an
+empty ``ListenDatagram=`` or ``ListenStream=`` directive. This can be used when
+you want to configure kresd to listen on all IPv4/IPv6 network interfaces (if
+you've disabled IPv6 support in kernel, use ``0.0.0.0`` instead of ``[::]`` ).
+
+.. code-block:: none
+
+   # /etc/systemd/system/kresd.socket.d/override.conf
+   [Socket]
+   ListenDatagram=
+   ListenStream=
+   ListenDatagram=[::]:53
+   ListenStream=[::]:53
+
+It can also be useful if you want to use the Knot DNS with the `dnsproxy
+module`_ to have both resolver and authoritative server running on the same
+machine.
 
 .. code-block:: none
 
@@ -426,7 +442,8 @@ The default port can also be overriden by using an empty ``ListenDatagram=`` or
    ListenDatagram=[::1]:53000
    ListenStream=[::1]:53000
 
-The ``kresd-tls.socket`` can also be configured to listen for TLS connections.
+The ``kresd-tls.socket`` can also be configured in the same way to listen for
+TLS connections.
 
 .. code-block:: bash
 

diff --git a/distro/common/systemd/kresd.systemd.7 b/distro/common/systemd/kresd.systemd.7
index 420b110370d5380435c505a0b59b39e52a8814bb..1ffa911c7bfe8dd609706be00ebd173f81e02e9d 100644 (file)
--- a/distro/common/systemd/kresd.systemd.7
+++ b/distro/common/systemd/kresd.systemd.7
@@ -1,4 +1,4 @@
-.TH "kresd.systemd" "7" "2018-06-04" "CZ.NIC" "Knot Resolver Systemd Units"
+.TH "kresd.systemd" "7" "2019-01-28" "CZ.NIC" "Knot Resolver Systemd Units"
 .\"
 .\" kresd.systemd.7 -- man page for systemd units for kresd
 .\"
@@ -83,6 +83,27 @@ ListenStream=192.0.2.115:853
 .RE
 .fi
 
+To configure \fBkresd\fR to listen on all IPv4 and IPv6 interfaces, you can
+remove the default localhost address by using an empty \fIListenDatagram=\fR,
+\fIListenStream=\fR directive and then bind to the [::] address. If you've
+disabled IPv6 support in kernel, use the 0.0.0.0 address instead.
+
+.nf
+.RS 4n
+# /etc/systemd/system/kresd.socket.d/override.conf
+[Socket]
+ListenDatagram=
+ListenStream=
+ListenDatagram=[::]:53
+ListenStream=[::]:53
+
+# /etc/systemd/system/kresd-tls.socket.d/override.conf
+[Socket]
+ListenStream=
+ListenStream=[::]:853
+.RE
+.fi
+
 For more detailed socket configuration, see \fBsystemd.socket\fR(5).
 
 .B Concurrent daemons