You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
333 lines
10 KiB
333 lines
10 KiB
#!/bin/bash
|
|
|
|
# Background:
|
|
# https://medium.com/@lopp/how-to-run-bitcoin-as-a-tor-hidden-service-on-ubuntu-cff52d543756
|
|
# https://bitcoin.stackexchange.com/questions/70069/how-can-i-setup-bitcoin-to-be-anonymous-with-tor
|
|
# https://github.com/lightningnetwork/lnd/blob/master/docs/configuring_tor.md
|
|
|
|
# command info
|
|
if [ $# -eq 0 ] || [ "$1" = "-h" ] || [ "$1" = "-help" ]; then
|
|
echo "small config script to switch TOR on or off"
|
|
echo "internet.tor.sh [on|off|prepare|btcconf|lndconf]"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Detect Base Image ..."
|
|
baseImage="?"
|
|
isDietPi=$(uname -n | grep -c 'DietPi')
|
|
isRaspbian=$(cat /etc/os-release 2>/dev/null | grep -c 'Raspbian')
|
|
isArmbian=$(cat /etc/os-release 2>/dev/null | grep -c 'Debian')
|
|
isUbuntu=$(cat /etc/os-release 2>/dev/null | grep -c 'Ubuntu')
|
|
if [ ${isRaspbian} -gt 0 ]; then
|
|
baseImage="raspbian"
|
|
fi
|
|
if [ ${isArmbian} -gt 0 ]; then
|
|
baseImage="armbian"
|
|
fi
|
|
if [ ${isUbuntu} -gt 0 ]; then
|
|
baseImage="ubuntu"
|
|
fi
|
|
if [ ${isDietPi} -gt 0 ]; then
|
|
baseImage="dietpi"
|
|
fi
|
|
if [ "${baseImage}" = "?" ]; then
|
|
cat /etc/os-release 2>/dev/null
|
|
echo "!!! FAIL !!!"
|
|
echo "Base Image cannot be detected or is not supported."
|
|
exit 1
|
|
else
|
|
echo "OK running ${baseImage}"
|
|
fi
|
|
|
|
# function: install keys & sources
|
|
prepareTorSources()
|
|
{
|
|
# Prepare for TOR service
|
|
echo "*** INSTALL TOR REPO ***"
|
|
echo ""
|
|
|
|
echo "*** Install dirmngr ***"
|
|
sudo apt install dirmngr -y
|
|
echo ""
|
|
|
|
echo "*** Adding KEYS deb.torproject.org ***"
|
|
curl https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | sudo gpg --import
|
|
sudo gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -
|
|
echo ""
|
|
|
|
echo "*** Adding Tor Sources to sources.list ***"
|
|
if [ "${baseImage}" = "raspbian" ] || [ "${baseImage}" = "armbian" ] || [ "${baseImage}" = "dietpi" ]; then
|
|
echo "deb https://deb.torproject.org/torproject.org stretch main" | sudo tee -a /etc/apt/sources.list
|
|
echo "deb-src https://deb.torproject.org/torproject.org stretch main" | sudo tee -a /etc/apt/sources.list
|
|
elif [ "${baseImage}" = "ubuntu" ]; then
|
|
echo "deb https://deb.torproject.org/torproject.org bionic main" | sudo tee -a /etc/apt/sources.list
|
|
echo "deb-src https://deb.torproject.org/torproject.org bionic main" | sudo tee -a /etc/apt/sources.list
|
|
fi
|
|
echo "OK"
|
|
echo ""
|
|
}
|
|
|
|
activateBitcoinOverTOR()
|
|
{
|
|
echo "*** Changing ${network} Config ***"
|
|
|
|
btcExists=$(sudo ls /home/bitcoin/.${network}/${network}.conf | grep -c "${network}.conf")
|
|
if [ ${btcExists} -gt 0 ]; then
|
|
networkIsTor=$(sudo cat /home/bitcoin/.${network}/${network}.conf | grep 'onlynet=onion' -c)
|
|
if [ ${networkIsTor} -eq 0 ]; then
|
|
|
|
# clean all previous added nodes
|
|
sudo sed -i "s/^addnode=.*//g" /home/bitcoin/.${network}/${network}.conf
|
|
|
|
echo "Addding TOR config ..."
|
|
sudo chmod 777 /home/bitcoin/.${network}/${network}.conf
|
|
echo "onlynet=onion" >> /home/bitcoin/.${network}/${network}.conf
|
|
if [ "${network}" = "bitcoin" ]; then
|
|
# adding some bitcoin onion nodes to connect to to make connection easier
|
|
echo "addnode=fno4aakpl6sg6y47.onion" >> /home/bitcoin/.${network}/${network}.conf
|
|
echo "addnode=toguvy5upyuctudx.onion" >> /home/bitcoin/.${network}/${network}.conf
|
|
echo "addnode=ndndword5lpb7eex.onion" >> /home/bitcoin/.${network}/${network}.conf
|
|
echo "addnode=6m2iqgnqjxh7ulyk.onion" >> /home/bitcoin/.${network}/${network}.conf
|
|
echo "addnode=5tuxetn7tar3q5kp.onion" >> /home/bitcoin/.${network}/${network}.conf
|
|
fi
|
|
sudo chmod 444 /home/bitcoin/.${network}/${network}.conf
|
|
|
|
sudo cp /home/bitcoin/.${network}/${network}.conf /home/admin/.${network}/${network}.conf
|
|
sudo chown admin:admin /home/admin/.${network}/${network}.conf
|
|
|
|
else
|
|
echo "Chain network already configured for TOR"
|
|
fi
|
|
else
|
|
echo "BTC config does not found (yet) - try with 'internet.tor.sh btcconf' again later"
|
|
fi
|
|
|
|
}
|
|
|
|
activateLndOverTOR()
|
|
{
|
|
echo "*** Putting LND behind TOR ***"
|
|
|
|
lndExists=$(sudo ls /etc/systemd/system/lnd.service | grep -c "lnd.service")
|
|
if [ ${lndExists} -gt 0 ]; then
|
|
|
|
# modify LND service
|
|
echo "Make sure LND is disabled"
|
|
sudo systemctl disable lnd 2>/dev/null
|
|
|
|
echo "editing /etc/systemd/system/lnd.service"
|
|
sudo sed -i "s/^ExecStart=\/usr\/local\/bin\/lnd.*/ExecStart=\/usr\/local\/bin\/lnd --tor\.active --tor\.v2 --listen=127\.0\.0\.1\:9735/g" /etc/systemd/system/lnd.service
|
|
|
|
echo "Enable LND again"
|
|
sudo systemctl enable lnd
|
|
echo "OK"
|
|
echo ""
|
|
|
|
else
|
|
echo "LND service not found (yet) - try with 'internet.tor.sh lndconf' again later"
|
|
fi
|
|
|
|
}
|
|
|
|
# if started with prepare
|
|
if [ "$1" = "prepare" ] || [ "$1" = "-prepare" ]; then
|
|
prepareTorSources
|
|
exit 0
|
|
fi
|
|
|
|
# if started with prepare
|
|
if [ "$1" = "btcconf" ]; then
|
|
activateBitcoinOverTOR
|
|
exit 0
|
|
fi
|
|
|
|
# if started with prepare
|
|
if [ "$1" = "lndconf" ]; then
|
|
activateLndOverTOR
|
|
exit 0
|
|
fi
|
|
|
|
# check and load raspiblitz config
|
|
# to know which network is running
|
|
source /home/admin/raspiblitz.info
|
|
source /mnt/hdd/raspiblitz.conf
|
|
if [ ${#network} -eq 0 ]; then
|
|
echo "FAIL - missing /mnt/hdd/raspiblitz.conf"
|
|
exit 1
|
|
fi
|
|
|
|
# add default value to raspi config if needed
|
|
if [ ${#runBehindTor} -eq 0 ]; then
|
|
echo "runBehindTor=off" >> /mnt/hdd/raspiblitz.conf
|
|
fi
|
|
|
|
# location of TOR config
|
|
# make sure /etc/tor exists
|
|
sudo mkdir /etc/tor 2>/dev/null
|
|
torrc="/etc/tor/torrc"
|
|
|
|
# stop services (if running)
|
|
echo "making sure services are not running"
|
|
sudo systemctl stop lnd 2>/dev/null
|
|
sudo systemctl stop ${network}d 2>/dev/null
|
|
sudo systemctl stop tor@default 2>/dev/null
|
|
|
|
# switch on
|
|
if [ "$1" = "1" ] || [ "$1" = "on" ]; then
|
|
echo "switching the TOR ON"
|
|
|
|
# setting value in raspi blitz config
|
|
sudo sed -i "s/^runBehindTor=.*/runBehindTor=on/g" /mnt/hdd/raspiblitz.conf
|
|
|
|
# check if TOR was already installed and is funtional
|
|
echo ""
|
|
echo "*** Check if TOR service is functional ***"
|
|
torRunning=$(curl --connect-timeout 10 --socks5-hostname 127.0.0.1:9050 https://check.torproject.org | grep "Congratulations. This browser is configured to use Tor." -c)
|
|
if [ ${torRunning} -gt 0 ]; then
|
|
clear
|
|
echo "You are all good - TOR is already running."
|
|
echo ""
|
|
exit 0
|
|
else
|
|
echo "TOR not running ... proceed with switching to TOR."
|
|
echo ""
|
|
fi
|
|
|
|
# check if TOR package is installed
|
|
packageInstalled=$(dpkg -s tor-arm | grep -c 'Status: install ok')
|
|
if [ ${packageInstalled} -eq 0 ]; then
|
|
|
|
# calling function from above
|
|
prepareTorSources
|
|
|
|
echo "*** Updating System ***"
|
|
sudo apt-get update
|
|
echo ""
|
|
|
|
echo "*** Install Tor ***"
|
|
sudo apt install tor tor-arm -y
|
|
|
|
echo ""
|
|
echo "*** Tor Config ***"
|
|
#sudo rm -r -f /mnt/hdd/tor 2>/dev/null
|
|
sudo mkdir /mnt/hdd/tor 2>/dev/null
|
|
sudo mkdir /mnt/hdd/tor/sys 2>/dev/null
|
|
sudo mkdir /mnt/hdd/tor/web80 2>/dev/null
|
|
sudo mkdir /mnt/hdd/tor/lnd9735 2>/dev/null
|
|
sudo mkdir /mnt/hdd/tor/lndrpc9735 2>/dev/null
|
|
sudo chmod -R 700 /mnt/hdd/tor
|
|
sudo chown -R bitcoin:bitcoin /mnt/hdd/tor
|
|
cat > ./torrc <<EOF
|
|
### See 'man tor', or https://www.torproject.org/docs/tor-manual.html
|
|
|
|
DataDirectory /mnt/hdd/tor/sys
|
|
PidFile /mnt/hdd/tor/sys/tor.pid
|
|
|
|
SafeLogging 0
|
|
Log notice stdout
|
|
Log notice file /mnt/hdd/tor/notice.log
|
|
Log info file /mnt/hdd/tor/info.log
|
|
|
|
RunAsDaemon 1
|
|
User bitcoin
|
|
PortForwarding 1
|
|
ControlPort 9051
|
|
SocksPort 9050
|
|
ExitRelay 0
|
|
|
|
CookieAuthFile /mnt/hdd/tor/sys/control_auth_cookie
|
|
CookieAuthentication 1
|
|
CookieAuthFileGroupReadable 1
|
|
|
|
# Hidden Service v2 for WEB ADMIN INTERFACE
|
|
HiddenServiceDir /mnt/hdd/tor/web80/
|
|
HiddenServicePort 80 127.0.0.1:80
|
|
|
|
# Hidden Service v2 for LND RPC
|
|
HiddenServiceDir /mnt/hdd/tor/lndrpc10009/
|
|
HiddenServicePort 80 127.0.0.1:10009
|
|
|
|
# Hidden Service v3 for LND incomming connections (just in case)
|
|
# https://trac.torproject.org/projects/tor/wiki/doc/NextGenOnions#Howtosetupyourownprop224service
|
|
HiddenServiceDir /mnt/hdd/tor/lnd9735
|
|
HiddenServiceVersion 3
|
|
HiddenServicePort 9735 127.0.0.1:9735
|
|
|
|
# NOTE: bitcoind get tor service automatically - see /mnt/hdd/bitcoin for onion key
|
|
EOF
|
|
sudo rm $torrc
|
|
sudo mv ./torrc $torrc
|
|
sudo chmod 644 $torrc
|
|
sudo chown -R bitcoin:bitcoin /var/run/tor/
|
|
echo ""
|
|
|
|
# NYX - Tor monitor tool
|
|
# https://nyx.torproject.org/#home
|
|
echo "*** Installing NYX - TOR monitoring Tool ***"
|
|
nyxInstalled=$(sudo pip list 2>/dev/null | grep 'nyx' -c)
|
|
if [ ${nyxInstalled} -eq 0 ]; then
|
|
sudo pip install nyx
|
|
else
|
|
echo "NYX already installed"
|
|
fi
|
|
echo ""
|
|
|
|
echo "ReadWriteDirectories=-/mnt/hdd/tor" | sudo tee -a /lib/systemd/system/tor@default.service
|
|
|
|
else
|
|
echo "TOR package/service is installed and was prepared earlier .. just activating again"
|
|
fi
|
|
|
|
# ACTIVATE TOR SERVICE
|
|
echo "*** Enable TOR Service ***"
|
|
sudo systemctl daemon-reload
|
|
sudo systemctl enable tor@default
|
|
echo ""
|
|
|
|
# ACTIVATE BITCOIN OVER TOR (function call)
|
|
activateBitcoinOverTOR
|
|
|
|
# ACTIVATE LND OVER TOR (function call)
|
|
activateLndOverTOR
|
|
|
|
echo "OK - TOR is now ON"
|
|
echo "needs reboot to activate new setting"
|
|
exit 0
|
|
fi
|
|
|
|
# switch off
|
|
if [ "$1" = "0" ] || [ "$1" = "off" ]; then
|
|
echo "switching TOR OFF"
|
|
|
|
# setting value in raspi blitz config
|
|
sudo sed -i "s/^runBehindTor=.*/runBehindTor=off/g" /mnt/hdd/raspiblitz.conf
|
|
|
|
# disable TOR service
|
|
echo "*** Disable TOR service ***"
|
|
sudo systemctl disable tor@default
|
|
echo ""
|
|
|
|
echo "*** Changing ${network} Config ***"
|
|
sudo sed -i "s/^onlynet=.*//g" /home/bitcoin/.${network}/${network}.conf
|
|
sudo sed -i "s/^addnode=.*//g" /home/bitcoin/.${network}/${network}.conf
|
|
sudo sed -i '/^ *$/d' /home/bitcoin/.${network}/${network}.conf
|
|
sudo cp /home/bitcoin/.${network}/${network}.conf /home/admin/.${network}/${network}.conf
|
|
sudo chown admin:admin /home/admin/.${network}/${network}.conf
|
|
echo ""
|
|
|
|
echo "*** Removing TOR from LND ***"
|
|
sudo systemctl disable lnd
|
|
echo "editing /etc/systemd/system/lnd.service"
|
|
sudo sed -i "s/^ExecStart=\/usr\/local\/bin\/lnd.*/ExecStart=\/usr\/local\/bin\/lnd --externalip=\${publicIP}:\${lndPort}/g" /etc/systemd/system/lnd.service
|
|
|
|
sudo systemctl enable lnd
|
|
echo "OK"
|
|
echo ""
|
|
|
|
echo "needs reboot to activate new setting"
|
|
exit 0
|
|
fi
|
|
|
|
echo "FAIL - Unknown Paramter $1"
|
|
echo "may needs reboot to run normal again"
|
|
exit 1
|