mirror of
http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/blog-contributions.git
synced 2025-07-02 11:56:40 +00:00
add install instruction and initial tor configuration
This commit is contained in:
parent
ccb349e53e
commit
fcc49e2fcb
2 changed files with 32 additions and 1 deletions
|
@ -204,12 +204,43 @@
|
||||||
<h1><b>Setting up the Server</b></h1>
|
<h1><b>Setting up the Server</b></h1>
|
||||||
|
|
||||||
First you want to set up your central monitoring server. For ease of use and better performance we are going to colocate the prometheus collector along with grafana.
|
First you want to set up your central monitoring server. For ease of use and better performance we are going to colocate the prometheus collector along with grafana.
|
||||||
|
<br>
|
||||||
|
|
||||||
|
<h2>Required installation</h2>
|
||||||
|
|
||||||
|
To get started we need the following software on the machine:
|
||||||
|
<br>
|
||||||
|
<ul>
|
||||||
|
<li>Tor: anonymize traffic</li>
|
||||||
|
<li>prometheus: aggregate metrics</li>
|
||||||
|
<li>prometheus-node-exporter: export local server metrics</li>
|
||||||
|
<li>docker: to run grafana</li>
|
||||||
|
</ul>
|
||||||
|
<img src="install.png"/>
|
||||||
|
|
||||||
|
|
||||||
<h2>Tor Configuration</h2>
|
<h2>Tor Configuration</h2>
|
||||||
The prometheus collector will only be accessed locally by grafana so it doesn't need to be accessible over tor. Grafana, on the other hand, does.
|
The prometheus collector will only be accessed locally by grafana so it doesn't need to be accessible over tor. Grafana, on the other hand, does.
|
||||||
<br>
|
<br>
|
||||||
|
|
||||||
Let's start with our torrc:<br>
|
Let's start with tor's configuration, use the following commands as root:
|
||||||
|
|
||||||
|
<br>
|
||||||
|
<pre><code class="nim">
|
||||||
|
sudo systemctl stop tor #stop the tor service
|
||||||
|
|
||||||
|
mkdir -p /var/lib/tor/auth_keys #create the client auth keys folder to store our second layer of authentication
|
||||||
|
chmod 400 -R /var/lib/tor/auth_keys #set restrictive file permissions
|
||||||
|
chown tor:tor -R /var/lib/tor/auth_keys # make tor owner of this folder
|
||||||
|
|
||||||
|
vi /etc/tor/torrc #edit the torrc file to add content
|
||||||
|
|
||||||
|
systemctl start tor #restart tor
|
||||||
|
systemctl status tor #check that everything works
|
||||||
|
</code></pre>
|
||||||
|
|
||||||
|
and add the content below:
|
||||||
|
|
||||||
<pre><code class="nim">
|
<pre><code class="nim">
|
||||||
AutomapHostsSuffixes .onion,.exit
|
AutomapHostsSuffixes .onion,.exit
|
||||||
DataDirectory /var/lib/tor
|
DataDirectory /var/lib/tor
|
||||||
|
|
BIN
opsec/anonymous_server_monitoring/install.png
Normal file
BIN
opsec/anonymous_server_monitoring/install.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 300 KiB |
Loading…
Add table
Add a link
Reference in a new issue