mirror of
https://github.com/r3bo0tbx1/tor-guard-relay.git
synced 2026-04-06 00:32:04 +02:00
a28ce0a4e6
Major refactor of Docker Compose configurations and tooling enhancements. - ✨ Add `gen-auth` script for generating Tor Control Port credentials - 🐳 Refactor Docker Compose templates: - Add native healthcheck configurations to all relay/bridge files - Standardize security capabilities (drop ALL, add SETUID/SETGID) - Remove verbose comments to streamline template usage - Update volume definitions for better data persistence - 🔧 Update base dependencies: - Alpine Linux -> 3.23.0 - Golang -> 1.25.5-alpine - 🧹 Standardize ENV variable names across all configurations
66 lines
1.7 KiB
JSON
66 lines
1.7 KiB
JSON
{
|
|
"minVersion": "0.16.0",
|
|
"services": {
|
|
"tor-bridge": {
|
|
"image": "r3bo0tbx1/onion-relay:latest",
|
|
"container_name": "tor-bridge",
|
|
"restart": "unless-stopped",
|
|
"network_mode": "host",
|
|
"environment": [
|
|
"TOR_RELAY_MODE=bridge",
|
|
"TOR_NICKNAME=MyTorBridge",
|
|
"TOR_CONTACT_INFO=admin@example.com",
|
|
"TOR_ORPORT=9001",
|
|
"TOR_OBFS4_PORT=9002"
|
|
],
|
|
"volumes": [
|
|
{
|
|
"type": "volume",
|
|
"source": "tor-bridge-data",
|
|
"target": "/var/lib/tor"
|
|
},
|
|
{
|
|
"type": "volume",
|
|
"source": "tor-bridge-logs",
|
|
"target": "/var/log/tor"
|
|
}
|
|
],
|
|
"security_opt": [
|
|
"no-new-privileges:true"
|
|
],
|
|
"cap_drop": [
|
|
"ALL"
|
|
],
|
|
"cap_add": [
|
|
"NET_BIND_SERVICE",
|
|
"CHOWN",
|
|
"SETUID",
|
|
"SETGID",
|
|
"DAC_OVERRIDE"
|
|
],
|
|
"healthcheck": {
|
|
"test": [
|
|
"CMD-SHELL",
|
|
"/usr/local/bin/healthcheck.sh"
|
|
],
|
|
"interval": "10m",
|
|
"timeout": "15s",
|
|
"start_period": "30s",
|
|
"retries": 3
|
|
},
|
|
"labels": {
|
|
"cosmos-stack": "TorBridge",
|
|
"cosmos-stack-main": "tor-bridge",
|
|
"cosmos-description": "🧅 Tor obfs4 Bridge - ENV-based config | TOR_* naming | Minimal setup with weekly security updates",
|
|
"cosmos-icon": "https://raw.githubusercontent.com/r3bo0tbx1/tor-guard-relay/refs/heads/main/src/obfs4.png",
|
|
"cosmos-auto-update": "true",
|
|
"cosmos-force-network-secured": "false",
|
|
"cosmos-version": "1.1.3"
|
|
}
|
|
}
|
|
},
|
|
"volumes": {
|
|
"tor-bridge-data": {},
|
|
"tor-bridge-logs": {}
|
|
}
|
|
} |