2ro
ab1a72d652
The Goblin wallet moved off the Nym mixnet to Tor: it now reaches relays over a Tor circuit to their clearnet endpoint, so the co-located mixnet exit this package bundled is retired. - delete the vendored `mixexit/` crate and the hardened `deploy/systemd/floonet-mixexit.service` bare-metal unit - docker-compose: drop the `mixexit` service (COMPOSE_PROFILES=exit) and its `mixexit-data` volume; fix the top-of-file service list - .env.example: replace the "Mixnet exit" block (COMPOSE_PROFILES=exit, FLOONET_EXIT_UPSTREAM) with the Tor onion toggle - README: replace the "Mixnet exit" section with "Tor onion", fix the feature table, deploy paths, and the COMPOSE_PROFILES reference row Add Tor as the first-class replacement deploy option, the same recipe already proven in production: an optional `tor` compose service (COMPOSE_PROFILES=tor) plus deploy/tor/torrc, a stock system tor daemon whose hidden service forwards straight to strfry's websocket listener (no TLS on that hop, the onion is already encrypted end to end). strfry core stays stock; this is packaging and docs, no relay patch. The default stack is unchanged (the onion is opt-in, as the exit was). name-authority builds green; cargo test and clippy pass. docker-compose validated (structure + YAML).
8 lines
376 B
Docker
8 lines
376 B
Docker
# Minimal Tor daemon that fronts the Floonet relay with an onion service.
|
|
# Stock tor from Alpine, no patches; all config lives in the mounted torrc.
|
|
FROM alpine:3.20
|
|
RUN apk add --no-cache tor
|
|
# tor starts as root only long enough to create/own its data dir, then drops
|
|
# to the unprivileged `tor` user named in torrc (`User tor`).
|
|
ENTRYPOINT ["tor", "-f", "/etc/tor/torrc"]
|