Commit Graph

5 Commits

Author SHA1 Message Date
NW
3bbda97bb9 fix: proper Tor user and directory permissions
- Add User tor to torrc for privilege dropping
- chown /var/lib/tor to tor:nogroup before Tor starts
- chmod 755 on hostname directories so root can read them
- Remove invalid chown tor:tor (tor group doesn't exist in Alpine)
2026-06-24 12:15:16 +01:00
NW
9d8d9edc00 fix: add User tor to torrc and chown data dirs
Tor refuses to start when DataDirectory is owned by root.
Added User tor directive and proper chown for /var/lib/tor and /onion-hosts.
2026-06-24 12:11:41 +01:00
NW
45d2bfbcf8 fix: newline validation bug in entrypoint.sh
echo adds trailing newline, causing false positives. Use printf and case statement instead.
2026-06-24 12:09:32 +01:00
NW
67c1436670 feat: save onion addresses to file and .env on host
- entrypoint.sh: background process writes onion-hosts.txt with SSH_ONION and ADMIN_ONION
- docker-compose.yml: bind mount tor-proxy/hosts for onion address persistence on host
- tor-proxy/get-onions.sh: reads onion addresses and updates .env with ADMIN_URL, SSH_ONION, ADMIN_ONION
- .gitignore: exclude tor-proxy/hosts/onion-hosts.txt (secret)
- tor-proxy/hosts/.gitkeep: ensure directory exists in git
2026-06-24 11:45:43 +01:00
NW
d8bfb29205 feat: add tor-proxy service for SSH and admin panel access via Tor
- Add tor-proxy/Dockerfile: Alpine + Tor with entrypoint
- Add tor-proxy/entrypoint.sh: dynamic torrc generation with env var validation
- Update docker-compose.yml: add tor-proxy service with shared tor_proxy_net network
- Two Tor hidden services: SSH (port 22) and admin panel (port 80 -> 3001)
- Update .env.example: add SSH_HOST_IP, SHOP_CONTAINER, ADMIN_PORT vars
2026-06-24 11:30:38 +01:00