Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Disable tor #69

Open
EgorChadov opened this issue Jan 12, 2025 · 6 comments
Open

Disable tor #69

EgorChadov opened this issue Jan 12, 2025 · 6 comments

Comments

@EgorChadov
Copy link

EgorChadov commented Jan 12, 2025

Hello!

Is it possible to turn off tor entirely?

My current docker-compose is:

networks:
  private_network:
    driver: bridge
    driver_opts:
      com.docker.network.bridge.enable_icc: "true"
    attachable: true
    internal: false
    ipam:
      config:
        - subnet: 10.2.0.0/24


services:
  adguard:
    depends_on: [wiregate]
    container_name: adguard
    image: adguard/adguardhome
    restart: unless-stopped
    hostname: adguard
    # Volumes store your data between container upgrades
    volumes:
      - "./configs/adguard/Data:/opt/adguardhome/work"
      - "./configs/adguard:/opt/adguardhome/conf"
    networks:
      private_network:
        ipv4_address: 10.2.0.100   

  wiregate:
      #image: noxcis/wiregate:vidar
      image: noxcis/wiregate:jiaotu-beta-v0.4
      container_name: wiregate
      hostname: wiregate
      cap_add:
        - NET_ADMIN
      devices:
        - /dev/net/tun:/dev/net/tun  
      restart: unless-stopped
      volumes:
        - "./conf:/etc/wireguard"
        - "./pf_conf:/WireGate/iptable-rules/"
        - "./db:/WireGate/db"
        - "./configs/dnscrypt:/WireGate/dnscrypt"
        #- "./configs/tor:/etc/tor/"
        - "./configs/logs:/WireGate/log/"
        - "./configs/master-key:/WireGate/master-key"

      environment:
        #- WGDCONF_PATH=/etc/wireguard
        - AMNEZIA_WG=true

      #Tor Settings
      ##########################################################
        - WGD_TOR_PROXY=false          #Enable Tor
        - WGD_TOR_EXIT_NODES={}     #Ex. {gb},{fr}
        - WGD_TOR_DNS_EXIT_NODES={}
        - WGD_TOR_BRIDGES=false        #Enable Tor Bridges
        - WGD_TOR_PLUGIN=snowflake    #OPTIONS webtunnel, obfs4, snowflake
      #WGDashboard Global Settings
      ##########################################################
        - WGD_WELCOME_SESSION=false	  ##Promts user accont creation after fist #. 
        - WGD_AUTH_REQ=true
        - WGD_USER=admin
        - WGD_PASS=admin
        - WGD_REMOTE_ENDPOINT=#your domain or ip
        - WGD_REMOTE_ENDPOINT_PORT=80
        - WGD_PEER_ENDPOINT_ALLOWED_IP=0.0.0.0/0, ::/0
        - WGD_KEEP_ALIVE=21
        - WGD_MTU=1384
        - WGD_PORT_RANGE_STARTPORT=4430
        - WGD_DNS=10.2.0.100
        - WGD_IPTABLES_DNS=10.2.0.100
      ports:
        - "4430-4433:4430-4433/udp" #UDP Interface Listen Ports For Zones
      sysctls:
        - net.ipv4.ip_forward=1
        - net.ipv4.conf.all.src_valid_mark=1
        - net.ipv6.conf.all.forwarding=1
        - net.ipv6.conf.default.forwarding=1
      networks:
        private_network:
          ipv4_address: 10.2.0.3

As you can see WGD_TOR_PROXY and WGD_TOR_BRIDGES turned off. But tor is still running in system and container logs shows that tor getting new bridges. Also button 'Bridges enabled' in web interface always green no matter what I'm choosing.

2025-01-13_02-04-32

2025-01-13_02-05-06

2025-01-13_02-05-24

@NOXCIS
Copy link
Owner

NOXCIS commented Jan 12, 2025

Just change the iptables for the configuration you're using. Look in the Static-Deploy/src/iptable-rules/ for the default non-tor script templates.
Tor just exists as an optional exit proxy.

Yeah it doesn't matter if the bridges are defined in the config, if the UseBridges 1 line inst present. Which is all that toggle does. Adds/removes the use bridges from the config. The plugins aren't used without bridges.

Also what build are you on. beta & dev builds are untested.

Use jiaotu-beta-v0.4, if you're gonna use the beta builds.

@EgorChadov
Copy link
Author

Thanks for your answer.

So, if WGD_TOR_PROXY=false, WGD_TOR_BRIDGES=false and iptables set to non-tor templates then tor is disabled? But it will still exist in the container, right?

Thanks for the wiregate, I really like it!

I also got a question about ipv6. Why may it not work? My VPS has ipv6 and it's configurated. We don't need other iptables rules for ipv6?

@NOXCIS
Copy link
Owner

NOXCIS commented Jan 14, 2025

Those flags in the compose are for your initial enviorment setup for the 4 generated configurations. So if you set them to true they will apply the tor iptables to the configs. False will generate configs that use the non tor iptables. However the tor procsess will still be running regarless.

if your not using ipv6 there no need for iptables until you do use ipv6.

Dont thank me that this jackass over on WGDashboard. donaldzou/WGDashboard#358 (comment). I took offense and builtout Wiregate out of pure spite. Thats why ill help out but refuse to do PR's.

@DaanSelen <--Thank this useless dumbass.

@DaanSelen
Copy link

Those flags in the compose are for your initial enviorment setup for the 4 generated configurations. So if you set them to true they will apply the tor iptables to the configs. False will generate configs that use the non tor iptables. However the tor procsess will still be running regarless.

if your not using ipv6 there no need for iptables until you do use ipv6.

Dont thank me that this jackass over on WGDashboard. donaldzou/WGDashboard#358 (comment). I took offense and builtout Wiregate out of pure spite. Thats why ill help out but refuse to do PR's.

@DaanSelen <--Thank this useless dumbass.

I'm sorry I had to step in to create a working image instead of the non-functional state you left it in.

@NOXCIS
Copy link
Owner

NOXCIS commented Jan 15, 2025

@DaanSelen You're full of shit. Remind me of what a support enginner is again? Mate github is public and so is your ignorance. Point out the commit, do a git blame if your words have any credibility. You do this for the name, i do for the game, we are not the same old man.
9YSKS0C

@DaanSelen
Copy link

DaanSelen commented Jan 15, 2025

@DaanSelen You're full of shit. Remind me of what a support enginner is again? Mate github is public and so is your ignorance. Point out the commit, do a git blame if your words have any credibility. You do this for the name, i do for the game, we are not the same old man.
What-is-Arrogance

I do not have to prove anything to someone so arrogant and full of himself. Donald himself proposed a rollback once your work was done.

Please get out of you butthurt tantrum and resume your life. Like we said already in WGDashboard communication mediums, your actions like this are not welcome, and those were not my words.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants