mirror of
https://github.com/r3bo0tbx1/tor-guard-relay.git
synced 2026-04-06 00:32:04 +02:00
be4f2bc125
🔧 New tool: gen-family - generate/view Happy Family keys - Supports --force flag to overwrite existing keys without backup prompt 🐳 Dockerfiles: gen-family in both Dockerfile and Dockerfile.edge 🔧 Entrypoint: - Phase 2: detect *.secret_family_key, log found keys (informational only) - Guard/exit config gen: append FamilyId + MyFamily from ENV vars - Bridge intentionally excluded 📊 Status tool: show family key count + Happy Family config state 📚 Docs: - README: Happy Family section (generate / import), persistence table, flowchart - ARCHITECTURE: all mermaid diagrams updated (Phase 2, config gen, tools, dirs) - TOOLS: full gen-family reference with examples and exit codes - DEPLOYMENT, MIGRATION, MIGRATION-V1.1.X, TROUBLESHOOTING: 5 -> 6 tools - FAQ, example configs: version bump + FamilyId/MyFamily placeholders - Directory authority voting: how 9 dirauths vote on relay flags (5/9 consensus) - CIISS v2 ContactInfo: field reference, generator link, proof:uri-rsa verification - All TOR_CONTACT_INFO examples updated to CIISS v2 format across templates and docs 📋 Templates: - Guard/exit/multi-relay compose: TOR_FAMILY_ID + TOR_MY_FAMILY env vars - All cosmos-compose + docker-compose versions -> 1.1.7 👷 CI: validate.yml gen-family in 8 spots (threshold 6), security tests, quick-test 🛡️ SECURITY.md: 1.1.7 active, 1.1.6 maintenance, gen-family in tools list 🔖 Version bump 1.1.6 -> 1.1.7 across 30+ files, tool count 5 -> 6, CHANGELOG entry No breaking changes. TOR_FAMILY_ID and TOR_MY_FAMILY are optional.
58 lines
1.4 KiB
JSON
58 lines
1.4 KiB
JSON
{
|
|
"minVersion": "0.8.0",
|
|
"services": {
|
|
"TorGuardRelay": {
|
|
"image": "r3bo0tbx1/onion-relay:latest",
|
|
"container_name": "TorGuardRelay",
|
|
"restart": "unless-stopped",
|
|
"environment": [
|
|
"TZ=Asia/Tokyo"
|
|
],
|
|
"network_mode": "host",
|
|
"volumes": [
|
|
{
|
|
"type": "volume",
|
|
"source": "tor-guard-data",
|
|
"target": "/var/lib/tor"
|
|
},
|
|
{
|
|
"type": "volume",
|
|
"source": "tor-guard-logs",
|
|
"target": "/var/log/tor"
|
|
},
|
|
{
|
|
"type": "bind",
|
|
"source": "/home/<user>/relay.conf",
|
|
"target": "/etc/tor/torrc",
|
|
"read_only": true
|
|
}
|
|
],
|
|
"security_opt": [
|
|
"no-new-privileges:true"
|
|
],
|
|
"cap_drop": [
|
|
"ALL"
|
|
],
|
|
"cap_add": [
|
|
"NET_BIND_SERVICE",
|
|
"CHOWN",
|
|
"SETUID",
|
|
"SETGID",
|
|
"DAC_OVERRIDE"
|
|
],
|
|
"labels": {
|
|
"cosmos-description": "🛡️ Tor Guard Relay",
|
|
"cosmos-force-network-secured": "false",
|
|
"cosmos-icon": "https://raw.githubusercontent.com/r3bo0tbx1/tor-guard-relay/refs/heads/main/src/onion.png",
|
|
"cosmos-stack": "TorGuardRelay",
|
|
"cosmos-stack-main": "TorGuardRelay",
|
|
"cosmos-version": "1.1.7",
|
|
"maintainer": "rE-Bo0t.bx1 <r3bo0tbx1@brokenbotnet.com>"
|
|
}
|
|
}
|
|
},
|
|
"volumes": {
|
|
"tor-guard-data": {},
|
|
"tor-guard-logs": {}
|
|
}
|
|
} |