summaryrefslogtreecommitdiff
path: root/puppet/modules/site_webapp
diff options
context:
space:
mode:
authorMicah Anderson <micah@riseup.net>2017-04-24 14:38:32 -0400
committerMicah Anderson <micah@riseup.net>2017-04-25 16:58:41 -0400
commitada9645de11d75701db8202f34de5c26a2b749c2 (patch)
tree26f5239a2dd8c3e2ddefccee15839faeae7a16a2 /puppet/modules/site_webapp
parentc393af8fd5321b8ddf547aed22f833899e56e20e (diff)
Add single-hop hidden service capability.
This cuts the number of hops for a tor onion service from 6 to 3, speeding it up considerably. This removes the anonymity aspect of the service, so it must be enabled intentionally, knowing that the server's location no longer is hidden.
Diffstat (limited to 'puppet/modules/site_webapp')
-rw-r--r--puppet/modules/site_webapp/manifests/hidden_service.pp5
1 files changed, 4 insertions, 1 deletions
diff --git a/puppet/modules/site_webapp/manifests/hidden_service.pp b/puppet/modules/site_webapp/manifests/hidden_service.pp
index 81d431cd..6651df86 100644
--- a/puppet/modules/site_webapp/manifests/hidden_service.pp
+++ b/puppet/modules/site_webapp/manifests/hidden_service.pp
@@ -11,7 +11,10 @@ class site_webapp::hidden_service {
include apache::module::removeip
include tor::daemon
- tor::daemon::hidden_service { 'webapp': ports => [ '80 127.0.0.1:80'] }
+ tor::daemon::hidden_service { 'webapp':
+ ports => [ '80 127.0.0.1:80'],
+ single_hop => $hidden_service['single_hop']
+ }
file {
'/var/lib/tor/webapp/':