Menu
Tor hidden service integration for Haven relay including start.sh entrypoint logic, torrc configuration, and data volume persistence. Use when enabling Tor, debugging hidden service issues, or modifying the container entrypoint.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
CI/CD pipeline for haven-docker including the GitHub Actions workflow for GHCR publishing, Makefile-driven DockerHub release, cosign image signing, and version management. Use when modifying build automation, release processes, or image signing.
Dockerfile multi-stage build, compose.yml service config, image tagging, volume mounts, and resource limits for the haven-docker project. Use when modifying the Docker build, changing volumes, updating compose settings, or troubleshooting container issues.
Configuration reference for Haven relay including .env variables, relay JSON files, database engine selection, backup providers, and rate limiter tuning. Use when modifying relay settings, adding new config variables, or debugging configuration issues.
| name | tor-integration |
| description | Tor hidden service integration for Haven relay including start.sh entrypoint logic, torrc configuration, and data volume persistence. Use when enabling Tor, debugging hidden service issues, or modifying the container entrypoint. |
Haven can expose the relay as a Tor hidden service, running inside the same container.
The entrypoint start.sh checks the TOR_ENABLED env var:
#!/usr/bin/env bash
if [[ "$TOR_ENABLED" == 1 ]]; then
echo "HiddenServiceDir /var/lib/tor/haven/" >> /etc/tor/torrc
echo "HiddenServicePort 80 ${RELAY_BIND_ADDRESS}:${RELAY_PORT}" >> /etc/tor/torrc
tor &
fi
cd /haven
./haven
When TOR_ENABLED=1:
/etc/tor/torrctor in the backgroundRELAY_BIND_ADDRESS:RELAY_PORT (default 0.0.0.0:3355).onion address to Haven's portTor keys are persisted via the volume mount:
- ./data/tor:/var/lib/tor
This ensures the .onion address survives container restarts. The hidden service hostname is stored at /var/lib/tor/haven/hostname.
Set in .env:
TOR_ENABLED=1
docker compose up -d
docker compose exec haven cat /var/lib/tor/haven/hostname
The relay is then available at ws://<address>.onion.
Tor is installed from the official Tor Project apt repository (not Debian's package). The Dockerfile adds the Tor Project GPG key and apt source to get the latest stable version.