# Managed by {{ SOFTWARE_NAME }} (roles/svc-net-tor) — do not edit by hand.
RunAsDaemon 0
Log notice stdout
DataDirectory {{ lookup('volume', 'svc-net-tor', 'tor_data').target }}

SocksPort {{ lookup('tor_socks', '0.0.0.0') }}
{% for _cidr in NETWORK_INTERNAL_CIDRS %}
SocksPolicy accept {{ _cidr }}
{% endfor %}
SocksPolicy reject *
ControlPort 127.0.0.1:9051
CookieAuthentication 1

{% if not (TOR_USE_ENTRY_GUARDS | bool) %}
UseEntryGuards 0
{% endif %}

{% if TOR_FLAVOR == 'chutney' %}
%include /run/tor/chutney-net.conf
{% endif %}

{% if TOR_EGRESS_ROUTER_ENABLED | bool %}
AutomapHostsOnResolve 1
AutomapHostsSuffixes .onion
VirtualAddrNetworkIPv4 {{ TOR_EGRESS_VIRTUAL_NET_IPV4 }}
{% if DEPLOYMENT_MODE == 'swarm' %}
TransPort 0.0.0.0:{{ TOR_TRANS_PORT }}
DNSPort 0.0.0.0:{{ TOR_DNS_PORT }}
{% else %}
TransPort 127.0.0.1:{{ TOR_TRANS_PORT }}
DNSPort 127.0.0.1:{{ TOR_DNS_PORT }}
{% if TOR_CONTAINER_DNS_HOST | length > 0 %}
TransPort {{ TOR_CONTAINER_DNS_HOST }}:{{ TOR_TRANS_PORT }}
DNSPort {{ TOR_CONTAINER_DNS_HOST }}:{{ TOR_DNS_PORT }}
{% endif %}
{% endif %}
{% endif %}
HiddenServiceDir /var/lib/tor/infinito/node/
HiddenServiceVersion 3
{% for _p in TOR_ONION_EXTRA_PORTS %}
HiddenServicePort {{ _p.onion_port }} {{ TOR_HS_BACKEND_HOST }}:{{ _p.target.rsplit(':', 1) | last }}
{% endfor %}