freedombone-utils-onion 19KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570
  1. #!/bin/bash
  2. #
  3. # .---. . .
  4. # | | |
  5. # |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
  6. # | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
  7. # ' ' --' --' -' - -' ' ' -' -' -' ' - --'
  8. #
  9. # Freedom in the Cloud
  10. #
  11. # Onion functions
  12. #
  13. # License
  14. # =======
  15. #
  16. # Copyright (C) 2014-2016 Bob Mottram <bob@freedombone.net>
  17. #
  18. # This program is free software: you can redistribute it and/or modify
  19. # it under the terms of the GNU Affero General Public License as published by
  20. # the Free Software Foundation, either version 3 of the License, or
  21. # (at your option) any later version.
  22. #
  23. # This program is distributed in the hope that it will be useful,
  24. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  25. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  26. # GNU Affero General Public License for more details.
  27. #
  28. # You should have received a copy of the GNU Affero General Public License
  29. # along with this program. If not, see <http://www.gnu.org/licenses/>.
  30. # The maximum amount of traffic per day in gigabytes
  31. TOR_MAX_TRAFFIC_PER_DAY_GB=3
  32. TOR_PACKAGE_UPSTREAM='http://deb.torproject.org/torproject.org'
  33. TOR_GPG_KEY='A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89'
  34. function add_email_hostname {
  35. extra_email_hostname="$1"
  36. email_hostnames=$(cat /etc/exim4/update-exim4.conf.conf | grep "dc_other_hostnames" | awk -F "'" '{print $2}')
  37. if [[ "$email_hostnames" != *"$extra_email_hostname"* ]]; then
  38. sed -i "s|dc_other_hostnames=.*|dc_other_hostnames='$emailhostnames;extra_email_hostname'|g" /etc/exim4/update-exim4.conf.conf
  39. update-exim4.conf
  40. dpkg-reconfigure --frontend noninteractive exim4-config
  41. systemctl restart saslauthd
  42. fi
  43. }
  44. function onion_update {
  45. # update so that new onion services appear
  46. systemctl restart tor
  47. }
  48. function wait_for_onion_service_base {
  49. onion_service_name="$1"
  50. sleep_ctr=0
  51. while [ ! -f /var/lib/tor/hidden_service_${onion_service_name}/hostname ]; do
  52. sleep 1
  53. sleep_ctr=$((sleep_ctr + 1))
  54. if [ $sleep_ctr -gt 10 ]; then
  55. break
  56. fi
  57. done
  58. }
  59. function wait_for_onion_service {
  60. onion_service_name="$1"
  61. wait_for_onion_service_base ${onion_service_name}
  62. if [ ! -f /var/lib/tor/hidden_service_${onion_service_name}/hostname ]; then
  63. # try a second time
  64. onion_update
  65. wait_for_onion_service_base ${onion_service_name}
  66. fi
  67. }
  68. function remove_onion_service {
  69. onion_service_name="$1"
  70. onion_service_port_to=$2
  71. nick="$3"
  72. if [ ${#nick} -gt 0 ]; then
  73. sed -i "/stealth ${nick}/d" /etc/tor/torrc
  74. fi
  75. sed -i "/hidden_service_${onion_service_name}/d" /etc/tor/torrc
  76. sed -i "/hidden_service_${onion_service_name}_mobile/d" /etc/tor/torrc
  77. sed -i "/127.0.0.1:${onion_service_port_to}/d" /etc/tor/torrc
  78. if [ $3 ]; then
  79. sed -i "/127.0.0.1:${3}/d" /etc/tor/torrc
  80. if [ $4 ]; then
  81. sed -i "/127.0.0.1:${4}/d" /etc/tor/torrc
  82. if [ $5 ]; then
  83. sed -i "/127.0.0.1:${5}/d" /etc/tor/torrc
  84. fi
  85. fi
  86. fi
  87. if [ -d /var/lib/tor/hidden_service_${onion_service_name} ]; then
  88. shred -zu /var/lib/tor/hidden_service_${onion_service_name}/*
  89. rm -rf /var/lib/tor/hidden_service_${onion_service_name}
  90. fi
  91. if [ -d /var/lib/tor/hidden_service_${onion_service_name}_mobile ]; then
  92. shred -zu /var/lib/tor/hidden_service_${onion_service_name}_mobile/*
  93. rm -rf /var/lib/tor/hidden_service_${onion_service_name}_mobile
  94. fi
  95. remove_completion_param "${onion_service_name} onion domain"
  96. onion_update
  97. }
  98. function add_onion_service {
  99. onion_service_name="$1"
  100. onion_service_port_from=$2
  101. onion_service_port_to=$3
  102. onion_stealth_name="$4"
  103. if [ -f /var/lib/tor/hidden_service_${onion_service_name}/hostname ]; then
  104. echo $(cat /var/lib/tor/hidden_service_${onion_service_name}/hostname)
  105. return
  106. fi
  107. if [ ! -d /var/lib/tor ]; then
  108. echo $"No Tor installation found. ${onion_service_name} onion site cannot be configured."
  109. exit 877367
  110. fi
  111. if ! grep -q "hidden_service_${onion_service_name}" /etc/tor/torrc; then
  112. echo "HiddenServiceDir /var/lib/tor/hidden_service_${onion_service_name}/" >> /etc/tor/torrc
  113. echo "HiddenServicePort ${onion_service_port_from} 127.0.0.1:${onion_service_port_to}" >> /etc/tor/torrc
  114. if [ ${#onion_stealth_name} -gt 0 ]; then
  115. echo "HiddenServiceAuthorizeClient stealth ${onion_stealth_name}" >> /etc/tor/torrc
  116. fi
  117. fi
  118. onion_update
  119. function_check wait_for_onion_service
  120. wait_for_onion_service ${onion_service_name}
  121. if [ ! -f /var/lib/tor/hidden_service_${onion_service_name}/hostname ]; then
  122. echo $"${onion_service_name} onion site hostname not found"
  123. exit 763624
  124. fi
  125. onion_address=$(cat /var/lib/tor/hidden_service_${onion_service_name}/hostname)
  126. # Record the domain in the completion file
  127. set_completion_param "${onion_service_name} onion domain" "${onion_address}"
  128. echo $onion_address
  129. }
  130. function set_default_onion_domains {
  131. # If sites are only visible via Tor then for installation
  132. # purposes assign them some default domain names
  133. if [[ $ONION_ONLY == "no" ]]; then
  134. return
  135. fi
  136. POSTACTIV_DOMAIN_NAME='postactiv.local'
  137. GNUSOCIAL_DOMAIN_NAME='gnusocial.local'
  138. HTMLY_DOMAIN_NAME='htmly.local'
  139. GHOST_DOMAIN_NAME='ghost.local'
  140. DOKUWIKI_DOMAIN_NAME='dokuwiki.local'
  141. DEFAULT_DOMAIN_NAME="${PROJECT_NAME}.local"
  142. GIT_DOMAIN_NAME='gogs.local'
  143. }
  144. function create_avahi_onion_domains {
  145. if [[ $SYSTEM_TYPE == "mesh"* ]]; then
  146. return
  147. fi
  148. if [ ! -d /etc/avahi/services ]; then
  149. return
  150. fi
  151. if [ $GNUSOCIAL_DOMAIN_NAME ]; then
  152. function_check create_avahi_service
  153. create_avahi_service gnusocial http tcp $GNUSOCIAL_ONION_PORT
  154. fi
  155. if [ $HTMLY_DOMAIN_NAME ]; then
  156. function_check create_avahi_service
  157. create_avahi_service blog http tcp $HTMLY_ONION_PORT
  158. fi
  159. if [ $GIT_DOMAIN_NAME ]; then
  160. function_check create_avahi_service
  161. create_avahi_service git http tcp $GIT_ONION_PORT
  162. fi
  163. if [ $DOKUWIKI_DOMAIN_NAME ]; then
  164. function_check create_avahi_service
  165. create_avahi_service dokuwiki http tcp $DOKUWIKI_ONION_PORT
  166. fi
  167. }
  168. function allow_ssh_to_onion_address {
  169. if [[ $SYSTEM_TYPE == "mesh"* ]]; then
  170. return
  171. fi
  172. if [ ! -d /home/$MY_USERNAME/.ssh ]; then
  173. mkdir /home/$MY_USERNAME/.ssh
  174. fi
  175. if [ ! -d /etc/tor ]; then
  176. echo $'Tor not found when updating ssh'
  177. exit 528257
  178. fi
  179. if ! grep -q "onion" /home/$MY_USERNAME/.ssh/config; then
  180. echo 'Host *.onion' >> /home/$MY_USERNAME/.ssh/config
  181. echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> /home/$MY_USERNAME/.ssh/config
  182. fi
  183. }
  184. function enable_ssh_via_onion {
  185. if [[ $SYSTEM_TYPE == "mesh"* ]]; then
  186. return
  187. fi
  188. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  189. return
  190. fi
  191. apt-get -yq install tor connect-proxy
  192. if ! grep -q 'Host *.onion' /home/$MY_USERNAME/.ssh/config; then
  193. if [ ! -d /home/$MY_USERNAME/.ssh ]; then
  194. mkdir /home/$MY_USERNAME/.ssh
  195. fi
  196. echo 'Host *.onion' >> /home/$MY_USERNAME/.ssh/config
  197. echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> /home/$MY_USERNAME/.ssh/config
  198. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.ssh
  199. chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.ssh/config
  200. fi
  201. if ! grep -q 'Host *.onion' /root/.ssh/config; then
  202. if [ ! -d /root/.ssh ]; then
  203. mkdir /root/.ssh
  204. fi
  205. echo 'Host *.onion' >> /root/.ssh/config
  206. echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> /root/.ssh/config
  207. fi
  208. if ! grep -q 'Host *.onion' /etc/skel/.ssh/config; then
  209. if [ ! -d /etc/skel/.ssh ]; then
  210. mkdir /etc/skel/.ssh
  211. fi
  212. echo 'Host *.onion' >> /etc/skel/.ssh/config
  213. echo 'ProxyCommand connect -R remote -5 -S 127.0.0.1:9050 %h %p' >> /etc/skel/.ssh/config
  214. fi
  215. mark_completed $FUNCNAME
  216. }
  217. function configure_ssh_onion {
  218. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  219. return
  220. fi
  221. if [[ $SYSTEM_TYPE == "mesh"* ]]; then
  222. return
  223. fi
  224. SSH_ONION_HOSTNAME=$(add_onion_service ssh ${SSH_PORT} ${SSH_PORT})
  225. if [[ "$SSH_ONION_HOSTNAME" != *'.onion' ]]; then
  226. echo $'ssh onion site not generated'
  227. exit 624128
  228. fi
  229. set_completion_param "ssh onion domain" "${SSH_ONION_HOSTNAME}"
  230. add_email_hostname "${SSH_ONION_HOSTNAME}"
  231. mark_completed $FUNCNAME
  232. }
  233. function install_tor {
  234. if [[ $SYSTEM_TYPE == "mesh*" ]]; then
  235. return
  236. fi
  237. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  238. return
  239. fi
  240. echo "deb $TOR_PACKAGE_UPSTREAM $DEBIAN_VERSION main" | sudo tee -a /etc/apt/sources.list.d/tor.list
  241. echo "deb-src $TOR_PACKAGE_UPSTREAM $DEBIAN_VERSION main" | sudo tee -a /etc/apt/sources.list.d/tor.list
  242. gpg --keyserver keys.gnupg.net --recv $TOR_GPG_KEY
  243. gpg --export $TOR_GPG_KEY | sudo apt-key add -
  244. apt-get update
  245. apt-get -yq install tor deb.torproject.org-keyring
  246. if [ ! -f /etc/tor/torrc ]; then
  247. echo 'Tor failed to install'
  248. exit 38259
  249. fi
  250. # turn off logging
  251. sed -i 's|#Log notice file.*|Log notice file /dev/null|g' /etc/tor/torrc
  252. sed -i 's|Log notice file.*|Log notice file /dev/null|g' /etc/tor/torrc
  253. # Restrict traffic
  254. sed -i "s|#AccountingMax.*|AccountingMax $TOR_MAX_TRAFFIC_PER_DAY_GB GBytes|g" /etc/tor/torrc
  255. sed -i "s|AccountingMax.*|AccountingMax $TOR_MAX_TRAFFIC_PER_DAY_GB GBytes|g" /etc/tor/torrc
  256. mark_completed $FUNCNAME
  257. }
  258. function resolve_dns_via_tor {
  259. if [[ $SYSTEM_TYPE == "mesh"* ]]; then
  260. return
  261. fi
  262. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  263. return
  264. fi
  265. if [ ! -f /etc/tor/torrc ]; then
  266. echo $'tor was not installed'
  267. exit 52952
  268. fi
  269. # resolve DNS via tor
  270. if ! grep 'DNSPort 53' /etc/tor/torrc; then
  271. echo 'DNSPort 53' >> /etc/tor/torrc
  272. echo 'AutomapHostsOnResolve 1' >> /etc/tor/torrc
  273. echo 'AutomapHostsSuffixes .exit,.onion' >> /etc/tor/torrc
  274. onion_update
  275. fi
  276. # don't change resolv.conf
  277. sed -i 's|, domain-name-servers||g' /etc/dhcp/dhclient.conf
  278. # point resolv.conf to tor
  279. echo 'nameserver 127.0.0.1:53' > /etc/resolv.conf
  280. # prevent resolv.conf from changing
  281. chattr +i /etc/resolv.conf
  282. mark_completed $FUNCNAME
  283. }
  284. # see https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy
  285. # Local Redirection and Anonymizing Middlebox
  286. function route_outgoing_traffic_through_tor {
  287. if [[ $(is_completed $FUNCNAME) == "1" ]]; then
  288. return
  289. fi
  290. if [[ $ROUTE_THROUGH_TOR != "yes" ]]; then
  291. return
  292. fi
  293. apt-get -yq install tor tor-arm
  294. ### set variables
  295. # Destinations you don't want routed through Tor
  296. _non_tor="192.168.1.0/24 192.168.0.0/24"
  297. # The user that Tor runs as
  298. _tor_uid="debian-tor"
  299. # Tor's TransPort
  300. _trans_port="9040"
  301. # Your internal interface
  302. _int_if="eth0"
  303. ### Set iptables *nat
  304. iptables -t nat -A OUTPUT -o lo -j RETURN
  305. iptables -t nat -A OUTPUT -m owner --uid-owner $_tor_uid -j RETURN
  306. iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 53
  307. # Allow clearnet access for hosts in $_non_tor
  308. for _clearnet in $_non_tor; do
  309. iptables -t nat -A OUTPUT -d $_clearnet -j RETURN
  310. iptables -t nat -A PREROUTING -i $_int_if -d $_clearnet -j RETURN
  311. done
  312. # Redirect all other pre-routing and output to Tor
  313. iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $_trans_port
  314. iptables -t nat -A PREROUTING -i $_int_if -p udp --dport 53 -j REDIRECT --to-ports 53
  315. iptables -t nat -A PREROUTING -i $_int_if -p tcp --syn -j REDIRECT --to-ports $_trans_port
  316. ### set iptables *filter
  317. iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
  318. # Allow clearnet access for hosts in $_non_tor
  319. for _clearnet in $_non_tor 127.0.0.0/8; do
  320. iptables -A OUTPUT -d $_clearnet -j ACCEPT
  321. done
  322. # Allow only Tor output
  323. iptables -A OUTPUT -m owner --uid-owner $_tor_uid -j ACCEPT
  324. iptables -A OUTPUT -j REJECT
  325. function_check save_firewall_settings
  326. save_firewall_settings
  327. if ! grep -q "fs.file-max" /etc/sysctl.conf; then
  328. echo "fs.file-max=100000" >> /etc/sysctl.conf
  329. /sbin/sysctl -p -q
  330. fi
  331. echo 'domain localdomain' > /etc/resolv.conf
  332. echo 'search localdomain' >> /etc/resolv.conf
  333. echo 'nameserver 127.0.0.1' >> /etc/resolv.conf
  334. if ! grep -q "VirtualAddrNetworkIPv4" /etc/tor/torrc; then
  335. echo 'VirtualAddrNetworkIPv4 10.192.0.0/10' >> /etc/tor/torrc
  336. fi
  337. if ! grep -q "AutomapHostsOnResolve" /etc/tor/torrc; then
  338. echo 'AutomapHostsOnResolve 1' >> /etc/tor/torrc
  339. fi
  340. if ! grep -q "TransPort" /etc/tor/torrc; then
  341. echo 'TransPort 9040' >> /etc/tor/torrc
  342. fi
  343. if ! grep -q "TransListenAddress 127.0.0.1" /etc/tor/torrc; then
  344. echo 'TransListenAddress 127.0.0.1' >> /etc/tor/torrc
  345. fi
  346. if ! grep -q "TransListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" /etc/tor/torrc; then
  347. echo "TransListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/tor/torrc
  348. fi
  349. if ! grep -q "DNSPort" /etc/tor/torrc; then
  350. echo 'DNSPort 53' >> /etc/tor/torrc
  351. fi
  352. if ! grep -q "DNSListenAddress 127.0.0.1" /etc/tor/torrc; then
  353. echo 'DNSListenAddress 127.0.0.1' >> /etc/tor/torrc
  354. fi
  355. if ! grep -q "DNSListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" /etc/tor/torrc; then
  356. echo "DNSListenAddress $LOCAL_NETWORK_STATIC_IP_ADDRESS" >> /etc/tor/torrc
  357. fi
  358. mark_completed $FUNCNAME
  359. }
  360. function get_app_onion_address {
  361. app_name="$1"
  362. mobilestr="$2"
  363. if [ ${#mobilestr} -gt 0 ]; then
  364. mobilestr="_${mobilestr}"
  365. fi
  366. if grep -q "${app_name}${mobilestr} onion domain" $COMPLETION_FILE; then
  367. if grep -q "${app_name}${mobilestr} onion domain" $COMPLETION_FILE; then
  368. echo $(cat ${COMPLETION_FILE} | grep "${app_name}${mobilestr} onion domain" | head -n 1 | awk -F ':' '{print $2}')
  369. return
  370. fi
  371. fi
  372. echo ""
  373. }
  374. function tor_add_bridge {
  375. bridge_ip_address="$1"
  376. bridge_port="$2"
  377. bridge_key="$3"
  378. bridge_type='obfs4'
  379. if [[ "$bridge_ip_address" != *"."* ]]; then
  380. return
  381. fi
  382. if [ ${#bridge_port} -eq 0 ]; then
  383. return
  384. fi
  385. if [ ${#bridge_key} -eq 0 ]; then
  386. return
  387. fi
  388. apt-get -yq install obfs4proxy
  389. if grep -q "ClientTransportPlugin" /etc/tor/torrc; then
  390. sed -i 's|#ClientTransportPlugin|ClientTransportPlugin|g' /etc/tor/torrc
  391. sed -i 's|# ClientTransportPlugin|ClientTransportPlugin|g' /etc/tor/torrc
  392. sed -i 's|ClientTransportPlugin.*|ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy managed|g' /etc/tor/torrc
  393. else
  394. echo 'ClientTransportPlugin obfs4 exec /usr/bin/obfs4proxy managed' >> /etc/tor/torrc
  395. fi
  396. if grep -q "UseBridges" /etc/tor/torrc; then
  397. sed -i 's|#UseBridges|UseBridges|g' /etc/tor/torrc
  398. sed -i 's|# UseBridges|UseBridges|g' /etc/tor/torrc
  399. sed -i 's|UseBridges.*|UseBridges 1|g' /etc/tor/torrc
  400. else
  401. echo 'UseBridges 1' >> /etc/tor/torrc
  402. fi
  403. bridge_str="Bridge $bridge_type ${bridge_ip_address}:${bridge_port} ${bridge_key}"
  404. if ! grep -q "${bridge_str}" /etc/tor/torrc; then
  405. sed -i "/UseBridges/a ${bridge_str}" >> /etc/tor/torrc
  406. fi
  407. systemctl restart tor
  408. }
  409. function tor_remove_bridge {
  410. bridge_ip_address="$1"
  411. bridge_type='obfs4'
  412. if [[ "$bridge_ip_address" == *"."* ]]; then
  413. bridge_str="Bridge $bridge_type ${bridge_ip_address}"
  414. else
  415. if grep -q " ${bridge_ip_address}" /etc/tor/torrc; then
  416. bridge_str=" ${bridge_ip_address}"
  417. else
  418. return
  419. fi
  420. fi
  421. if grep -q "${bridge_str}" /etc/tor/torrc; then
  422. sed -i "/${bridge_str}/d" /etc/tor/torrc
  423. fi
  424. # If there are no bridges remaining then remove UseBridges
  425. if ! grep -q "Bridge " /etc/tor/torrc; then
  426. if ! grep -q "#UseBridges" /etc/tor/torrc; then
  427. sed -i 's|UseBridges|#UseBridges|g' /etc/tor/torrc
  428. fi
  429. if ! grep -q "#ClientTransportPlugin" /etc/tor/torrc; then
  430. sed -i 's|ClientTransportPlugin|#ClientTransportPlugin|g' /etc/tor/torrc
  431. fi
  432. fi
  433. systemctl restart tor
  434. }
  435. function tor_create_bridge_relay {
  436. read_config_param 'TOR_BRIDGE_PORT'
  437. read_config_param 'TOR_BRIDGE_NICKNAME'
  438. if [ ! $TOR_BRIDGE_PORT ]; then
  439. return
  440. fi
  441. if [ ${#TOR_BRIDGE_PORT} -eq 0 ]; then
  442. return
  443. fi
  444. if [ ${#TOR_BRIDGE_NICKNAME} -eq 0 ]; then
  445. return
  446. fi
  447. apt-get -yq install obfs4proxy
  448. sed -i 's|#BridgeRelay.*|BridgeRelay 1|g' /etc/tor/torrc
  449. sed -i 's|BridgeRelay.*|BridgeRelay 1|g' /etc/tor/torrc
  450. sed -i 's|#ServerTransportPlugin.*|ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy|g' /etc/tor/torrc
  451. sed -i 's|ServerTransportPlugin.*|ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy|g' /etc/tor/torrc
  452. if ! grep -q 'ExtORPort ' /etc/tor/torrc; then
  453. echo "ExtORPort $TOR_BRIDGE_PORT" >> /etc/tor/torrc
  454. else
  455. sed -i "s|#ExtORPort .*|ExtORPort $TOR_BRIDGE_PORT|g" /etc/tor/torrc
  456. sed -i "s|ExtORPort .*|ExtORPort $TOR_BRIDGE_PORT|g" /etc/tor/torrc
  457. fi
  458. read_config_param 'MY_EMAIL_ADDRESS'
  459. sed -i "s|#ContactInfo.*|ContactInfo $MY_EMAIL_ADDRESS|g" /etc/tor/torrc
  460. if [ $TOR_BRIDGE_NICKNAME ]; then
  461. sed -i "s|#Nickname.*|Nickname $TOR_BRIDGE_NICKNAME|g" /etc/tor/torrc
  462. sed -i "s|Nickname.*|Nickname $TOR_BRIDGE_NICKNAME|g" /etc/tor/torrc
  463. fi
  464. firewall_add tor_bridge $TOR_BRIDGE_PORT tcp
  465. systemctl restart tor
  466. }
  467. function tor_remove_bridge_relay {
  468. if ! grep -q '#BridgeRelay ' /etc/tor/torrc; then
  469. sed -i 's|BridgeRelay |#BridgeRelay |g' /etc/tor/torrc
  470. fi
  471. if ! grep -q '#ServerTransportPlugin ' /etc/tor/torrc; then
  472. sed -i 's|ServerTransportPlugin |#ServerTransportPlugin |g' /etc/tor/torrc
  473. fi
  474. if ! grep -q '#ExtORPort ' /etc/tor/torrc; then
  475. sed -i 's|ExtORPort |#ExtORPort |g' /etc/tor/torrc
  476. fi
  477. if ! grep -q '#ContactInfo ' /etc/tor/torrc; then
  478. sed -i "s|ContactInfo |#ContactInfo |g" /etc/tor/torrc
  479. fi
  480. if ! grep -q '#Nickname ' /etc/tor/torrc; then
  481. sed -i "s|Nickname |#Nickname |g" /etc/tor/torrc
  482. fi
  483. read_config_param 'TOR_BRIDGE_PORT'
  484. firewall_remove $TOR_BRIDGE_PORT tcp
  485. systemctl restart tor
  486. }
  487. # NOTE: deliberately no exit 0