Acquiring remote servers anonymously (non-KYC providers)
+ +
Clearnet Services: Centralized, but can be used anonymously
+
+Today's clearnet web is hugely centralised, you have businesses out there (meaning potential and very likely governmental proxies) that are letting you rent servers (VPSes / dedicated servers / etc) and domain names to be able to have a clearnet service.
+If you want to have clearnet services but to keep your anonymity regardless, you'll need to go through KYC-free resellers (you can find them here)
+To find out how to run Anonymous Clearnet Services, you can check out this tutorial.
+
+If you don't want to give in to that centralization, but remain on the clearnet, you'd have to run a service from home, using only the public IP you're getting from your ISP.
+Problem is that your ISP knows who you are, is actively spying on what you do with your internet connection, and from there he knows that you are running the website. No anonymity whatsoever.
+Tor Hidden Services: Decentralized and Anonymous
+One solution to that situation if your goal is to have a website hosted at home, as a Tor hidden service. Meaning your service can only be accessed through the Tor network, anonymous by default. Like so, your ISP can only see that you are using the tor network, but he can't tell what you're doing with it.
+
+if your ISP does not allow Tor traffic, you'll need to run a VPN on the server that's running the Tor hidden service, that way, you'll be able hide to your ISP that there is tor traffic at your house, while still being able to have a Hidden service reachable.
+To find out how to run Hidden Services, you can check out this tutorial.
+ +Warning, do not host anything sensitive at Home!
+Note that Tor has had 0days in the past, and it could still have some. Therefore be aware hosting Anonymous services at home is not suitable for Sensitive use. As all it takes is for Tor to have one 0day for an adversary to be able to find out where the service truly is. Therefore keep in mind that you should only self-host services that are not going to get you in trouble if an adversary ever finds out that it is you who's the administrator.
+ +Nihilism
++ Until there is Nothing left. + +
+My Links
+
+
+ RSS Feed
Matrix Chat
+
+
About nihilist
+Donate XMR: 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8
Contact: nihilist@nihilism.network (PGP)
+
Tor Website Setup
-
+
In this tutorial we'll setup a TOR website, which can be accessed via a .onion link. We'll set it up using nginx and Tor.
-TODO: setups where 1) isp doesnt allow tor traffic 2) isp doesnt allow tor, nor vpns
Initial Setup
-First compute your tor domain:
+Before starting, check if your ISP allows tor use or not. And if it does not, make sure you install a VPN to hide the fact that you're using Tor as we did previously here:
+# Download the Mullvad signing key
+sudo curl -fsSLo /usr/share/keyrings/mullvad-keyring.asc https://repository.mullvad.net/deb/mullvad-keyring.asc
+# Add the Mullvad repository server to apt
+echo "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --print-architecture )] https://repository.mullvad.net/deb/stable $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mullvad.list
+# Or add the Mullvad BETA repository server to apt
+echo "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --print-architecture )] https://repository.mullvad.net/deb/beta $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/mullvad.list
+
+# Install the package
+sudo apt update
+sudo apt install mullvad-vpn
+
+# Connect to Mullvad VPN
+mullvad account login
+Enter an account number: 91320912809328832
+Mullvad account "91320912809328832" set
+
+# Connect to the VPN:
+mullvad lockdown-mode set on
+mullvad connect
+
+curl ifconfig.me
+194.127.199.92
+
+Once done, install tor and compute your Tor domain:
+
[ Datura-Network ] [ /dev/pts/11 ] [/srv]
→ apt install gcc libc6-dev libsodium-dev make autoconf tor
diff --git a/servers/vpn/index.html b/servers/vpn/index.html
index c8cfea8..21fb2bc 100644
--- a/servers/vpn/index.html
+++ b/servers/vpn/index.html
@@ -122,6 +122,17 @@ echo "deb [signed-by=/usr/share/keyrings/mullvad-keyring.asc arch=$( dpkg --prin
sudo apt update
sudo apt install mullvad-vpn
+# Connect to Mullvad VPN
+mullvad account login
+Enter an account number: 91320912809328832
+Mullvad account "91320912809328832" set
+
+# Connect to the VPN:
+mullvad lockdown-mode set on
+mullvad connect
+
+curl ifconfig.me
+194.127.199.92
From there, Bob can launch the VPN from his desktop: