Category: Guides

Part 13 – Generating a Domain Name
Use the vanity generator (Shallot) to make some private keys.

Advance onward to part 14 or head back to the table of contents on page 1.… Continue reading

Part 12 – Hardening Tor
If you have multiple websites you can adjust these. If you are just using /var/www/ adjust accordingly.

cd /var/www/
sudo mkdir website1
sudo chown -R www-data /var/www/website1/
sudo chgrp -R www-data /var/www/website1/

cd /var/www/
sudo … Continue reading

Part 11 – Configuring HTTPS (SSL)
Generate SSL keys via CAcert.org. Great website for doing this is right here.

You’ll need to create three things:
.csr for the certificate signing request (CSR)
.crt for the signed certificate file
.key … Continue reading

Part 10 – Configuring Tor
Stop the Tor service from running while we tinker.
sudo service tor stop

Remove the default configuration file.
sudo rm /etc/tor/torrc

Fire up Nano and make a new configuration file.
sudo nano /etc/tor/torrc

Enter the … Continue reading

Part 9 – Configuring Apache

First up, here’s a cool add-on to limit speed and amount of connections of the people visiting your website. Great if you have finite bandwidth on the upstream. Its specific settings can be found in … Continue reading

Part 8 – Installing Tor
To get Tor up and running we need to install it with the following.
sudo apt-get install tor -y

And just like that Tor is installed and establishing Tor circuits.
sudo service tor stop

Let’s … Continue reading

Part 7 – Hardening Apache and Secure Shell

Next up we harden Apache and OpenSSH for the glass is always half empty. Start off by editing the security configuration file for Apache2.
sudo nano /etc/apache2/conf-available/security.conf

Change
ServerTokens OS
to
ServerTokens … Continue reading

Part 6 – Installing Samba Server

We need a way to gain access to the files on the Raspberry Pi so we can update your new website. Samba allows sharing across Windows, OS X and Linux. Very useful. An alternative … Continue reading

Part 5 – Installing Apache 2.4 HTTP Server
If you are hosting a clearnet website, you will want to make sure ports 80 (http) and 443 (https) are forwarded on your router. One of the wonderful things about the darknet … Continue reading

Part 4 – Hardening Your Pi

Hardening, important for the sake of reducing attack vectors! First off we’ll create a new user and then delete the “pi” user that comes preinstalled.

Log back in via SSH / Terminal / … Continue reading