snowflake/server/torrc

SocksPort 0
ORPort 9001
ExtORPort auto
BridgeRelay 1

ServerTransportListenAddr snowflake 0.0.0.0:443
ServerTransportPlugin snowflake exec ./server --acme-hostnames snowflake.example --acme-email admin@snowflake.example --log /var/log/tor/snowflake-server.log
README and documentation for server. 2017-01-21 14:53:09 -08:00			`SocksPort 0`
Enable tls websockets on the server * Code lifted from meek-server 2016-12-19 14:57:46 -08:00			`ORPort 9001`
			`ExtORPort auto`
README and documentation for server. 2017-01-21 14:53:09 -08:00			`BridgeRelay 1`
Enable tls websockets on the server * Code lifted from meek-server 2016-12-19 14:57:46 -08:00
Automatically fetch certificates from Let's Encrypt. This removes the --tls-cert and --tls-keys options and replaces them with --acme-hostname and (optional) --acme-email. It uses https://godoc.org/golang.org/x/crypto/acme/autocert, which is kind of a successor to https://godoc.org/rsc.io/letsencrypt. The autocert package only works when the listener runs on port 443. For that reason, if TOR_PT_SERVER_BINDADDR asks for a port other than 443, the program will open an additional listening port on 443. If there is an error opening the listener, it is reported through an SMETHOD-ERROR for the requested address. The inspiration for this code came from George Tankersley's patch for meek-server: https://bugs.torproject.org/18655#comment:8 https://github.com/gtank/meek/tree/letsencrypt 2017-01-18 19:19:26 -08:00			`ServerTransportListenAddr snowflake 0.0.0.0:443`
README and documentation for server. 2017-01-21 14:53:09 -08:00			`ServerTransportPlugin snowflake exec ./server --acme-hostnames snowflake.example --acme-email admin@snowflake.example --log /var/log/tor/snowflake-server.log`