50bd396c2b
- Caddy HTTPS static file server config - Tor hidden service (V3 onion) for anonymous access - Bootstrap generation script (blk0001.dat + txleveldb + database) - Dropbox upload script - Systemd services (tor-bootstrap, caddy) - Operator guide and verification script
25 lines
522 B
Desktop File
25 lines
522 B
Desktop File
[Unit]
|
|
Description=Tor hidden service for TRI Bootstrap Server
|
|
After=network-online.target
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
# Run Tor as the debian-tor user (standard on Debian/Ubuntu)
|
|
User=debian-tor
|
|
Group=debian-tor
|
|
ExecStart=/usr/bin/tor -f /etc/tor/tri-bootstrap/torrc
|
|
Restart=on-failure
|
|
RestartSec=10
|
|
|
|
# Hardening
|
|
NoNewPrivileges=yes
|
|
PrivateTmp=yes
|
|
ProtectSystem=strict
|
|
ProtectHome=yes
|
|
ReadOnlyPaths=/etc/tor/tri-bootstrap
|
|
WritePaths=/var/lib/tor/tri-bootstrap
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|