[dns] Run service as non-root.

diff --git a/dnscrypt-proxy/dnscrypt-proxy.toml b/dnscrypt-proxy/dnscrypt-proxy.toml
index 6ecd9152e2f8627ae7a4c0f19446577874787fbb..88fc91776435f21ab7589e949ca6097cac76aae7 100644 (file)
--- a/dnscrypt-proxy/dnscrypt-proxy.toml
+++ b/dnscrypt-proxy/dnscrypt-proxy.toml
@@ -52,7 +52,7 @@ max_clients = 250
 ## Note (2): this feature is not compatible with systemd socket activation.
 ## Note (3): when using -pidfile, the PID file directory must be writable by the new user
 
-# user_name = 'nobody'
+user_name = 'dnscrypt-proxy'
 
 
 ## Require servers (from remote sources) to satisfy specific properties