danwin1210/hosting
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make use of HiddenServiceExportCircuitID

Browse Source
This commit is contained in:
Daniel Winzen
2021-10-09 12:56:46 +02:00
parent e382b150a6
commit 9a1be9590c
2 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
etc/tor/torrc
View File

@ -11,6 +11,7 @@ HiddenServiceNumIntroductionPoints 5
HiddenServiceEnableIntroDoSDefense 1 HiddenServiceEnableIntroDoSDefense 1
HiddenServiceEnableIntroDoSRatePerSec 10 HiddenServiceEnableIntroDoSRatePerSec 10
HiddenServiceEnableIntroDoSBurstPerSec 100 HiddenServiceEnableIntroDoSBurstPerSec 100
HiddenServiceExportCircuitID haproxy
ClientUseIPv6 1 ClientUseIPv6 1
ClientUseIPv4 1 ClientUseIPv4 1

7
var/www/common.php
View File

@ -59,7 +59,7 @@ opcache.jit_buffer_size = 64M
session.use_strict_mode = 1 session.use_strict_mode = 1
'; ';
const NGINX_DEFAULT = 'server { const NGINX_DEFAULT = 'server {
listen unix:/var/run/nginx/suspended backlog=2048; listen unix:/var/run/nginx/suspended backlog=2048 proxy_protocol;
add_header Content-Type text/html; add_header Content-Type text/html;
location / { location / {
return 200 \'<html><head><title>Suspended</title></head><body>This domain has been suspended due to violation of our <a href="http://' . ADDRESS . '">hosting rules</a>.</body></html>\'; return 200 \'<html><head><title>Suspended</title></head><body>This domain has been suspended due to violation of our <a href="http://' . ADDRESS . '">hosting rules</a>.</body></html>\';
@ -67,7 +67,7 @@ const NGINX_DEFAULT = 'server {
} }
server { server {
listen [::]:80 ipv6only=off fastopen=100 backlog=2048 default_server; listen [::]:80 ipv6only=off fastopen=100 backlog=2048 default_server;
listen unix:/var/run/nginx.sock backlog=2048 default_server; listen unix:/var/run/nginx.sock backlog=2048 proxy_protocol default_server;
root /var/www/html; root /var/www/html;
index index.php; index index.php;
server_name ' . ADDRESS . ' *.' . ADDRESS . '; server_name ' . ADDRESS . ' *.' . ADDRESS . ';
@ -396,6 +396,7 @@ HiddenServiceNumIntroductionPoints $tmp[num_intros]
HiddenServiceVersion $tmp[version] HiddenServiceVersion $tmp[version]
HiddenServiceMaxStreamsCloseCircuit 1 HiddenServiceMaxStreamsCloseCircuit 1
HiddenServiceMaxStreams $tmp[max_streams] HiddenServiceMaxStreams $tmp[max_streams]
HiddenServiceExportCircuitID haproxy
"; ";
if($tmp['version']=='3'){ if($tmp['version']=='3'){
$torrc.="HiddenServiceEnableIntroDoSDefense 1 $torrc.="HiddenServiceEnableIntroDoSDefense 1
@ -541,7 +542,7 @@ function rewrite_nginx_config(){
} }
$autoindex = $tmp['autoindex'] ? 'on' : 'off'; $autoindex = $tmp['autoindex'] ? 'on' : 'off';
$nginx.="server { $nginx.="server {
listen unix:/var/run/nginx/$tmp[system_account]; listen unix:/var/run/nginx/$tmp[system_account] proxy_protocol;
root /home/$tmp[system_account]/www; root /home/$tmp[system_account]/www;
server_name $tmp[onion].onion *.$tmp[onion].onion; server_name $tmp[onion].onion *.$tmp[onion].onion;
access_log /var/log/nginx/access_$tmp[system_account].log custom buffer=4k flush=1m; access_log /var/log/nginx/access_$tmp[system_account].log custom buffer=4k flush=1m;