Expose only proxy port 2000 and update docs

README.md

@@ -44,26 +44,23 @@ This container runs the following vontainers in the stack.
 
 ## SOCKS ports on host
 
-Use these host ports depending on the traffic type:
+Proxy access is exposed on a single host port:
 
-* `127.0.0.1:2000` -> direct Tor SOCKS (`darktor:9050`), recommended primary endpoint.
+* `<host-ip>:2000` -> direct Tor SOCKS (`darktor:9050`), externally reachable.
   - Supports `.onion` and clearnet via `--socks5-hostname`.
-* `127.0.0.1:2010` -> `dark3proxy` SOCKS (`dark3proxy:1080`) for advanced policy routing.
-  - Intended for stack routing rules; use `:2000` when you specifically need reliable `.onion` access.
-* `127.0.0.1:2004` -> additional direct Tor SOCKS (`darktor:9050`).
+
+Additional non-proxy endpoint:
+
 * `127.0.0.1:2006/udp` -> Tor DNSPort (`darktor:9053`).
 
 Quick checks:
 
 ```sh
-# Onion over primary SOCKS
-curl --socks5-hostname 127.0.0.1:2000 -I http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
+# Onion over the only published proxy port
+curl --socks5-hostname <host-ip>:2000 -I http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion
 
-# Clearnet over primary SOCKS
-curl --socks5-hostname 127.0.0.1:2000 -I https://example.com
-
-# Clearnet over dark3proxy SOCKS
-curl --socks5-hostname 127.0.0.1:2010 -I https://example.com
+# Clearnet over the only published proxy port
+curl --socks5-hostname <host-ip>:2000 -I https://example.com
 ```
 
 The system offers a DNS that resolves many darknet and clearnet IP's.  The

docker-compose.lock.yml

@@ -13,7 +13,6 @@ services:
     sysctls:
       - "net.ipv6.conf.all.disable_ipv6=0"
     ports:
-      - "2010:1080" # dark3proxy SOCKS (advanced routing)
       - "2002:8161" # 3proxy-eagle web page
     networks:
       darkproxy:
@@ -84,8 +83,7 @@ services:
     volumes:
       - "./tor_yggdrasil_docker/torrc:/etc/tor/torrc:ro"
     ports:
-      - "127.0.0.1:2000:9050/tcp" # primary host SOCKS (direct Tor, onion-capable)
-      - "127.0.0.1:2004:9050/tcp" # direct Tor SOCKS (onion-capable)
+      - "2000:9050/tcp" # primary host SOCKS (direct Tor, onion-capable, externally reachable)
       - "127.0.0.1:2006:9053/udp" # direct Tor DNSPort
     restart: unless-stopped  # Auto-restart unless manually stopped
     dns:

docker-compose.yml

@@ -17,7 +17,6 @@ services:
     sysctls:
       - "net.ipv6.conf.all.disable_ipv6=0"
     ports:
-      - "2010:1080" # dark3proxy SOCKS (advanced routing)
       - "2002:8161" # 3proxy-eagle web page (localhost only)
     networks:
       darkproxy:
@@ -84,8 +83,7 @@ services:
     volumes:
       - "./tor_yggdrasil_docker/torrc:/etc/tor/torrc:ro"
     ports:
-      - "127.0.0.1:2000:9050/tcp" # primary host SOCKS (direct Tor, onion-capable)
-      - "127.0.0.1:2004:9050/tcp" # direct Tor SOCKS (onion-capable)
+      - "2000:9050/tcp" # primary host SOCKS (direct Tor, onion-capable, externally reachable)
       - "127.0.0.1:2006:9053/udp" # direct Tor DNSPort
     restart: unless-stopped  # Auto-restart unless manually stopped
     cpus: "2.0"