From 9d8d9edc00665950e4d5038bccec567225989485 Mon Sep 17 00:00:00 2001
From: NW <nw@softuniq.eu>
Date: Wed, 24 Jun 2026 12:11:41 +0100
Subject: [PATCH] fix: add User tor to torrc and chown data dirs

Tor refuses to start when DataDirectory is owned by root.
Added User tor directive and proper chown for /var/lib/tor and /onion-hosts.
---
 tor-proxy/entrypoint.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/tor-proxy/entrypoint.sh b/tor-proxy/entrypoint.sh
index 8497ec3..94dabe4 100644
--- a/tor-proxy/entrypoint.sh
+++ b/tor-proxy/entrypoint.sh
@@ -33,12 +33,17 @@ fi
 mkdir -p /var/lib/tor/ssh /var/lib/tor/admin
 chmod 700 /var/lib/tor/ssh /var/lib/tor/admin
 
+if id tor >/dev/null 2>&1; then
+    chown -R tor:tor /var/lib/tor
+fi
+
 cat > /etc/tor/torrc <<EOF
 # Generated by entrypoint.sh at container start
 RunAsDaemon 0
 SocksPort 0
 Log notice stdout
 DataDirectory /var/lib/tor
+User tor
 
 # --- SSH hidden service (proxies to host SSH) ---
 HiddenServiceDir /var/lib/tor/ssh/
@@ -54,6 +59,10 @@ cat /etc/tor/torrc
 
 mkdir -p /onion-hosts
 
+if id tor >/dev/null 2>&1; then
+    chown -R tor:tor /onion-hosts
+fi
+
 ( \
   echo "Waiting for onion addresses..."; \
   for i in $(seq 1 120); do \