>>59My config. Remember to set limit:
limit_req_zone $binary_remote_addr zone=txtdotapi:10m rate=2r/s;
server {
server_name txtdot.deep-swarm.xyz ;
location / {
limit_req zone=txtdotapi burst=4;
proxy_pass http://127.0.0.1:8070;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
listen [::]:443 ssl http2; # managed by Certbot
listen 443 ssl http2; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/txtdot.deep-swarm.xyz/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/txtdot.deep-swarm.xyz/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = txtdot.deep-swarm.xyz) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name txtdot.deep-swarm.xyz ;
listen 80;
listen [::]:80;
return 404; # managed by Certbot
}
server {
if ($host = txtdot.deep-swarm.xyz) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name txtdot.deep-swarm.xyz ;
listen 80;
location / {
limit_req zone=txtdotapi burst=4;
proxy_pass http://127.0.0.1:8070;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
server_name txtdot.deep-swarm.xyz txtdot.dschanlrufh4hvwygr65e7sathicyp5fce4ypuzizath36372ag6jxyd.onion ;
listen 4447;
listen [::]:4447;
}Change the
proxy_pass port to what you specify on your
docker-compose.yml, this line:
8087:8080
And
4447 is tor port configured on
/etc/tor/torrc:
HiddenServicePort 443 127.0.0.1:4447
So this is how a tor subdomain configured. I managed to do so several months ago but never write a guide like this.
If it does not work, try
systemctl restart nginx.service and systemctl restart tor.service several times (reasonable restart after changing the config…).