# Tor on koopa

**Runtime:** host **`tor.service`** (not a podman container).  
**Ports:** ORPort **8080** · ControlPort **9051** (loopback).  
**Non-exit** relay (`ExitRelay 0`).

```bash
systemctl status tor
ss -lntp | grep -E '8080|9051'
```

login-health: WARN if `tor.service` not active.  
Legacy `koopa-tor-relay` / `configs/tor/` removed from live inventory (git history keeps them).