mirror of
http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/blog-contributions.git
synced 2025-07-02 06:46:42 +00:00
add install instruction and initial tor configuration
This commit is contained in:
parent
ccb349e53e
commit
fcc49e2fcb
2 changed files with 32 additions and 1 deletions
|
@ -204,12 +204,43 @@
|
|||
<h1><b>Setting up the Server</b></h1>
|
||||
|
||||
First you want to set up your central monitoring server. For ease of use and better performance we are going to colocate the prometheus collector along with grafana.
|
||||
<br>
|
||||
|
||||
<h2>Required installation</h2>
|
||||
|
||||
To get started we need the following software on the machine:
|
||||
<br>
|
||||
<ul>
|
||||
<li>Tor: anonymize traffic</li>
|
||||
<li>prometheus: aggregate metrics</li>
|
||||
<li>prometheus-node-exporter: export local server metrics</li>
|
||||
<li>docker: to run grafana</li>
|
||||
</ul>
|
||||
<img src="install.png"/>
|
||||
|
||||
|
||||
<h2>Tor Configuration</h2>
|
||||
The prometheus collector will only be accessed locally by grafana so it doesn't need to be accessible over tor. Grafana, on the other hand, does.
|
||||
<br>
|
||||
|
||||
Let's start with our torrc:<br>
|
||||
Let's start with tor's configuration, use the following commands as root:
|
||||
|
||||
<br>
|
||||
<pre><code class="nim">
|
||||
sudo systemctl stop tor #stop the tor service
|
||||
|
||||
mkdir -p /var/lib/tor/auth_keys #create the client auth keys folder to store our second layer of authentication
|
||||
chmod 400 -R /var/lib/tor/auth_keys #set restrictive file permissions
|
||||
chown tor:tor -R /var/lib/tor/auth_keys # make tor owner of this folder
|
||||
|
||||
vi /etc/tor/torrc #edit the torrc file to add content
|
||||
|
||||
systemctl start tor #restart tor
|
||||
systemctl status tor #check that everything works
|
||||
</code></pre>
|
||||
|
||||
and add the content below:
|
||||
|
||||
<pre><code class="nim">
|
||||
AutomapHostsSuffixes .onion,.exit
|
||||
DataDirectory /var/lib/tor
|
||||
|
|
BIN
opsec/anonymous_server_monitoring/install.png
Normal file
BIN
opsec/anonymous_server_monitoring/install.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 300 KiB |
Loading…
Add table
Add a link
Reference in a new issue