nyxnor
commented
3 years ago Let's say I have a set of hidden services I want to add a set of clients, I can tick in a checklist the services I want to add clients, as well as well as add multiple clients at the same time, separated by a comma like this https://github.com/radio24/TorBox/blob/eb88bba0744b8ee0ec9bab6f232ce1faa4b16420/bridges_activate_old#L163 And if I loose trust a set of clients and want to remove them from the authorized list of multiple services, this should be done too.
Some scripts are required to be run with the debian-tor user, as it reads the /var/lib/torto check if service or client exists. I don't think there is a way to avoid that.
ghost
radio24
Setup the environment with 
Now copy from the terminal the address selecting the url and 
My old mod: https://github.com/nyxnor/raspiblitz/blob/tor-patch/home.admin/config.scripts/tor.onion-service.sh New mod: https://github.com/nyxnor/CLI-onion-services/blob/main/tor.onion-service.sh
Currently, the script CREATES, DELETES (optionally purge to delete the onion address), ADD and REMOVE auth, see CREDENTIALS. My script configure client auth server side, but the client side needs to be configure manually. I explained the commands deeply when running the script with echo, but it should be shortened to only display the string necessary and a guide in torbox page or text/ folder explaining how to do so.
This post was edited for reference. This is informational material of things to be implemented and reviewed if were. This is more a long term goal than a complete todo list. The texts were extracted from each link mentioned above them, only the most useful information.
Instructions
Matt Traudt HS Setup
TPO setup onion service
(Optional) Step 5: Running multiple onion services
If you want to forward multiple virtual ports for a single onion service, just add more HiddenServicePort lines. If you want to run multiple onion services from the same Tor client, just add another HiddenServiceDir line. All the following HiddenServicePort lines refer to this HiddenServiceDir line, until you add another HiddenServiceDir line:
Or in Apache with Tor service listening on port 80:
Try to run Tor more securely via a syscall sandbox.
https://www.torproject.org/docs/tor-manual.html.en#Sandbox
Sandbox 1
Disable the SOCKS port. Not like anything else on this box is using tor.
SocksPort 0
Set up the hidden service. propub3r6espa33w.onion -> www.propublica.org
We're using unix sockets instead of "127.0.0.1:xxxxx". see nginx conf.
Docs: https://www.torproject.org/docs/tor-manual.html.en#HiddenServicePort
HiddenServiceDir /var/run/tor/pp_www_hidserv HiddenServicePort 80 unix:/var/run/nginx-pponion-80.sock HiddenServicePort 443 unix:/var/run/nginx-pponion-443.sock
/etc/nginx/sites-enabled/propubonion.conf
#
Note that all of our hostnames listen to a unix socket instead
of "127.0.0.1:xxxxx".
Docs: http://nginx.org/en/docs/http/ngx_http_core_module.html#listen
map $http_upgrade $connection_upgrade { default "upgrade"; "" ""; }
HTTP BARE ONION
server { listen unix:/var/run/nginx-pponion-80.sock; server_name propub3r6espa33w.onion;
allow 127.0.0.1;
}
HTTPS BARE ONION
server { listen unix:/var/run/nginx-pponion-443.sock ssl spdy; server_name propub3r6espa33w.onion;
allow 127.0.0.1;
}
HiddenServiceDir /var/lib/tor/hs-my-website/ HiddenServiceVersion 3 HiddenServicePort 80 unix:/var/run/tor-hs-my-website.sock
add_header Onion-Location http://.onion$request_uri;
server { listen 80; listen [::]:80;
}
server { listen 443 ssl http2; listen [::]:443 ssl http2;
}
server { listen unix:/var/run/tor-hs-my-website.sock;
}
sudo nginx -t
sudo nginx -s reload
wget --server-response --spider your-website.tld
HiddenServiceDir /var/lib/tor/hidden/ftp/ HiddenServicePort 80 192.168.1.1:81
HiddenServicePort 80 unix:/etc/lighttpd/unix.sock