mirror of
https://github.com/fphammerle/docker-tor-proxy.git
synced 2025-10-27 02:43:35 +01:00
Fabian Peter Hammerle
35 lines
1.3 KiB
Bash
Executable File
35 lines
1.3 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
set -e
|
|
|
|
if [ "$(id -u)" -eq 0 ]; then
|
|
nft add chain ip nat PREROUTING { type nat hook prerouting priority dstnat \; } || true
|
|
nft add rule ip nat PREROUTING ip protocol tcp fib daddr type != local counter redirect to :9040 \
|
|
|| echo 'warning: failed to configure nftables for transparent proxy (missing CAP_NET_ADMIN?)'
|
|
nft add rule ip nat PREROUTING fib daddr type local udp dport 53 counter redirect to :9053 \
|
|
|| echo 'warning: failed to configure nftables for DNS proxy' \
|
|
'(alternative for less flexible `docker run --publish 53:9053 ...`)'
|
|
exec su -s /bin/sh tor -- "$0" "$@"
|
|
fi
|
|
|
|
# default: 120 sec
|
|
# https://github.com/torproject/tor/blob/tor-0.4.1.7/src/core/or/connection_edge.c#L1099
|
|
if [ -z "$SOCKS_TIMEOUT_SECONDS" ]; then
|
|
sed -e '/{socks_timeout_seconds}/d' /torrc.template > /tmp/torrc
|
|
else
|
|
sed -e "s/{socks_timeout_seconds}/$SOCKS_TIMEOUT_SECONDS/" /torrc.template > /tmp/torrc
|
|
fi
|
|
|
|
if [ -z "$EXIT_NODES" ]; then
|
|
sed --in-place -e '/{exit_nodes}/d' /tmp/torrc
|
|
else
|
|
sed --in-place -e "s#{exit_nodes}#$EXIT_NODES#" /tmp/torrc
|
|
fi
|
|
if [ -z "$EXCLUDE_EXIT_NODES" ]; then
|
|
sed --in-place -e '/{exclude_exit_nodes}/d' /tmp/torrc
|
|
else
|
|
sed --in-place -e "s#{exclude_exit_nodes}#$EXCLUDE_EXIT_NODES#" /tmp/torrc
|
|
fi
|
|
|
|
exec "$@"
|