Re:MoreOnionsPorfavor: Onionize your website and take back t...
by 0xggus on Thursday July 09, 2020 @09:09AM
(#23779756)
Yes, we are aware of some flaws in the current documentation that have been migrated from the old site to the new site. Very soon we will improve this.
Re:MoreOnionsPorfavor: Onionize your website and take back t...
by driverdan on Thursday July 09, 2020 @10:26AM
(#23780597)
Documentation and ease of setup have long been the biggest weaknesses of Tor. The browser is easy but setting up a server or any of the infrastructure isn't.
The first time you setup a server or a relay expect it to take half a day to a full weekend.
Re:MoreOnionsPorfavor: Onionize your website and take back t...
by 0xggus on Thursday July 09, 2020 @11:20AM
(#23781213)
The Tor community improved a lot the Tor Relay Guide in the last two years. Actually now you can easily setup a relay following the instructions: https://community.torproject.org/relay/setup/
And if you're an Ansible user, you will enjoy Nusenu's ansible-relayor: https://github.com/nusenu/ansible-relayor
Re:MoreOnionsPorfavor: Onionize your website and take back t...
by driverdan on Thursday July 09, 2020 @03:20PM
(#23783989)
You're right, those docs are a lot better than the last time I looked.
I forgot why exactly I didn't use ansible-relayor last time I setup relays but I had a reason. I'll try to use it next time I deploy a batch of relays.
Re:MoreOnionsPorfavor: Onionize your website and take back t...
by nyolfen on Thursday July 09, 2020 @08:29AM
(#23779439)
it's possible they're trying to avoid a monoculture of web servers that serve tor sites in order to avoid many sites becoming insecure in the event of a bug disclosure for a software package they have no control over
Re:MoreOnionsPorfavor: Onionize your website and take back t...
by caymanjim on Thursday July 09, 2020 @08:38AM
(#23779517)
They're not a tech support company or a hosting company. There are literally thousands and thousands of documents on basic web server installation and configuration already written. The information is trivial to find. It falls under "if you have to ask, you're not ready".
Re:MoreOnionsPorfavor: Onionize your website and take back t...
by easterncalculus on Thursday July 09, 2020 @09:03AM
(#23779716)
Have you actually run a hidden service before?
Running a default or standard configuration of the bigger web servers like Apache or NGINX is a terrible idea if you're actually trying to hide the identity of your server. Setting up a secure hidden service usually requires that several default or common features be disabled, if one actually wants to hide the location of the service.
Re:MoreOnionsPorfavor: Onionize your website and take back t...
by vorpalhex on Thursday July 09, 2020 @10:35AM
(#23780710)
...can you link some details on how we should actually configure this? Because the answer to your question is "No" but I'm sure a good many of the people here would like to be able to say yes.
https://community.torproject.org/onion-services/advanced/oni... works better, it shows the configuration, but assumes there is already an .onion address and does not point to documentation how to set it up.
Hey, I know documentation is hard. But this could be improved a lot. By now I figured out that I'd have to install Tor on the server (not my machine, as the docs stated), find the torrc (the documentation has to mention where it is), point to the localhost port active of the webserver, the .onion address is autogenerated (so this will be an unreadable mess?) and can be taken from a file the tor software generates.
And this:
> We're not going to cover how to set up a web server here. If you get stuck or want to do more, find a friend who can help you. We recommend you install a new separate web server for your onion service.
Just cut it out. I'm actually lucky enough to have friends that could help me with this, but what if I hadn't? Cover in the documentation what needs to be done, or at the very least don't show an attitude about it.