1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
# create hidden service for static sites
class site_static::hidden_service ( $single_hop = false ) {
Class['site_tor::hidden_service'] -> Class['site_static::hidden_service']
include site_tor::hidden_service
tor::daemon::hidden_service { 'static':
ports => [ '80 127.0.0.1:80'],
single_hop => $single_hop
}
file {
'/var/lib/tor/static/':
ensure => directory,
owner => 'debian-tor',
group => 'debian-tor',
mode => '2700';
'/var/lib/tor/static/private_key':
ensure => present,
source => "/srv/leap/files/nodes/${::hostname}/tor.key",
owner => 'debian-tor',
group => 'debian-tor',
mode => '0600',
notify => Service['tor'];
'/var/lib/tor/static/hostname':
ensure => present,
content => "${::site_static::onion_domain}\n",
owner => 'debian-tor',
group => 'debian-tor',
mode => '0600',
notify => Service['tor'];
}
# it is necessary to zero out the config of the status module
# because we are configuring our own version that is unavailable
# over the hidden service (see: #7456 and #7776)
apache::module { 'status': ensure => present, conf_content => ' ' }
include site_shorewall::tor
}
|
