From 6d0cad85f55b1f79c6f6451adda352da37fe4244 Mon Sep 17 00:00:00 2001 From: auto-ci Date: Sun, 8 Mar 2026 15:08:03 -0400 Subject: [PATCH] Expose only proxy port 2000 and update docs --- README.md | 21 +++++++++------------ docker-compose.lock.yml | 4 +--- docker-compose.yml | 4 +--- 3 files changed, 11 insertions(+), 18 deletions(-) diff --git a/README.md b/README.md index b87c17d..2e9d760 100644 --- a/README.md +++ b/README.md @@ -44,26 +44,23 @@ This container runs the following vontainers in the stack. ## SOCKS ports on host -Use these host ports depending on the traffic type: +Proxy access is exposed on a single host port: -* `127.0.0.1:2000` -> direct Tor SOCKS (`darktor:9050`), recommended primary endpoint. +* `:2000` -> direct Tor SOCKS (`darktor:9050`), externally reachable. - Supports `.onion` and clearnet via `--socks5-hostname`. -* `127.0.0.1:2010` -> `dark3proxy` SOCKS (`dark3proxy:1080`) for advanced policy routing. - - Intended for stack routing rules; use `:2000` when you specifically need reliable `.onion` access. -* `127.0.0.1:2004` -> additional direct Tor SOCKS (`darktor:9050`). + +Additional non-proxy endpoint: + * `127.0.0.1:2006/udp` -> Tor DNSPort (`darktor:9053`). Quick checks: ```sh -# Onion over primary SOCKS -curl --socks5-hostname 127.0.0.1:2000 -I http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion +# Onion over the only published proxy port +curl --socks5-hostname :2000 -I http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion -# Clearnet over primary SOCKS -curl --socks5-hostname 127.0.0.1:2000 -I https://example.com - -# Clearnet over dark3proxy SOCKS -curl --socks5-hostname 127.0.0.1:2010 -I https://example.com +# Clearnet over the only published proxy port +curl --socks5-hostname :2000 -I https://example.com ``` The system offers a DNS that resolves many darknet and clearnet IP's. The diff --git a/docker-compose.lock.yml b/docker-compose.lock.yml index b7cc133..e44a19a 100644 --- a/docker-compose.lock.yml +++ b/docker-compose.lock.yml @@ -13,7 +13,6 @@ services: sysctls: - "net.ipv6.conf.all.disable_ipv6=0" ports: - - "2010:1080" # dark3proxy SOCKS (advanced routing) - "2002:8161" # 3proxy-eagle web page networks: darkproxy: @@ -84,8 +83,7 @@ services: volumes: - "./tor_yggdrasil_docker/torrc:/etc/tor/torrc:ro" ports: - - "127.0.0.1:2000:9050/tcp" # primary host SOCKS (direct Tor, onion-capable) - - "127.0.0.1:2004:9050/tcp" # direct Tor SOCKS (onion-capable) + - "2000:9050/tcp" # primary host SOCKS (direct Tor, onion-capable, externally reachable) - "127.0.0.1:2006:9053/udp" # direct Tor DNSPort restart: unless-stopped # Auto-restart unless manually stopped dns: diff --git a/docker-compose.yml b/docker-compose.yml index edbc48d..67fd3e2 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,7 +17,6 @@ services: sysctls: - "net.ipv6.conf.all.disable_ipv6=0" ports: - - "2010:1080" # dark3proxy SOCKS (advanced routing) - "2002:8161" # 3proxy-eagle web page (localhost only) networks: darkproxy: @@ -84,8 +83,7 @@ services: volumes: - "./tor_yggdrasil_docker/torrc:/etc/tor/torrc:ro" ports: - - "127.0.0.1:2000:9050/tcp" # primary host SOCKS (direct Tor, onion-capable) - - "127.0.0.1:2004:9050/tcp" # direct Tor SOCKS (onion-capable) + - "2000:9050/tcp" # primary host SOCKS (direct Tor, onion-capable, externally reachable) - "127.0.0.1:2006:9053/udp" # direct Tor DNSPort restart: unless-stopped # Auto-restart unless manually stopped cpus: "2.0"