2ro
ab1a72d652
The Goblin wallet moved off the Nym mixnet to Tor: it now reaches relays over a Tor circuit to their clearnet endpoint, so the co-located mixnet exit this package bundled is retired. - delete the vendored `mixexit/` crate and the hardened `deploy/systemd/floonet-mixexit.service` bare-metal unit - docker-compose: drop the `mixexit` service (COMPOSE_PROFILES=exit) and its `mixexit-data` volume; fix the top-of-file service list - .env.example: replace the "Mixnet exit" block (COMPOSE_PROFILES=exit, FLOONET_EXIT_UPSTREAM) with the Tor onion toggle - README: replace the "Mixnet exit" section with "Tor onion", fix the feature table, deploy paths, and the COMPOSE_PROFILES reference row Add Tor as the first-class replacement deploy option, the same recipe already proven in production: an optional `tor` compose service (COMPOSE_PROFILES=tor) plus deploy/tor/torrc, a stock system tor daemon whose hidden service forwards straight to strfry's websocket listener (no TLS on that hop, the onion is already encrypted end to end). strfry core stays stock; this is packaging and docs, no relay patch. The default stack is unchanged (the onion is opt-in, as the exit was). name-authority builds green; cargo test and clippy pass. docker-compose validated (structure + YAML).
17 lines
764 B
Plaintext
17 lines
764 B
Plaintext
# Tor onion service in front of the Floonet relay (docker-compose `tor`
|
|
# profile). The hidden service forwards straight to strfry's websocket
|
|
# listener over the compose network; no TLS is needed on that hop because
|
|
# the onion transport is already encrypted and authenticated end to end.
|
|
#
|
|
# The .onion address is derived from the key tor writes under
|
|
# HiddenServiceDir. It is printed to the tor logs on first start and lives on
|
|
# the tor-data volume; back that volume up, since losing it rotates the
|
|
# address. Publish the .onion so wallets can reach this relay over Tor.
|
|
|
|
User tor
|
|
DataDirectory /var/lib/tor
|
|
|
|
HiddenServiceDir /var/lib/tor/floonet-relay
|
|
# onion virtual port 80 (ws default) -> the relay container's ws listener
|
|
HiddenServicePort 80 relay:7777
|