hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ops: host tor.service SoT drop configs/tor CTR

Browse source
This commit is contained in:
Hernâni Marques 2026-09-19 01:22:33 +02:00
parent b9e2541941
commit 82879637b6
No known key found for this signature in database
9 changed files with 7 additions and 675 deletions
Download patch file Download diff file Expand all files Collapse all files

29
host/tor/README.md
View file

@ -1,28 +1,13 @@
# Tor on koopa
**Runtime:** podman **`koopa-tor-relay`** (not host `tor.service`).
**Config mirror:** `configs/tor/` (`torrc`, Containerfile, migrate script, `create-container.sh`, user unit).
**Data/identity:** `~/koopa-tor-relay/data` (same keys as former `/var/lib/tor`).
**Process:** non-root **uid 1000** (`debian-tor`); recreate via `configs/tor/create-container.sh` after image rebuild.
| Port | Bind | Role |
|------|------|------|
| **8080** | `0.0.0.0` + `[::]` | ORPort (dual-stack) |
| **9051** | `127.0.0.1` | ControlPort (nyx / stem) |
Non-exit relay (`ExitRelay 0`, `SocksPort 0`).
### Root checklist
**Runtime:** host **`tor.service`** (not a podman container).
**Ports:** ORPort **8080** · ControlPort **9051** (loopback).
**Non-exit** relay (`ExitRelay 0`).
```bash
sudo systemctl disable --now tor
sudo systemctl mask tor
# linger already required for rootless user units:
# sudo loginctl enable-linger hernani
systemctl status tor
ss -lntp | grep -E '8080|9051'
```
### User unit
```bash
systemctl --user enable --now container-koopa-tor-relay.service
```
login-health: WARN if `tor.service` not active.
Legacy `koopa-tor-relay` / `configs/tor/` removed from live inventory (git history keeps them).