Conversation

Notices

1. menherahair (menherahair@eientei.org)'s status on Tuesday, 19-Sep-2023 03:29:52 JST menherahair

   How do I plug BloatFE into Tor?

   I run my bloat in a container on my pc. I guess I need to make it somehow use the tor router on the host, so it hits the APIs via tor.

   Then I need to view the html. The pages are local, but the media just point to the instance. I use a PAC file that says no proxy for anything local, otherwise use tor. I can see it works, will that be fine?

   The PAC file, for the ambitious:

   function FindProxyForURL(url, host) { if ( isInNet(host, "10.0.3.84", "255.255.255.0") ) { return "DIRECT"; } return "SOCKS5 localhost:9050"; }
   •  (mint@ryona.agency)'s status on Tuesday, 19-Sep-2023 03:29:50 JST 

     in reply to

     @menherahair Go’s standard HTTP library supports proxy envvars just fine, so something like env http_proxy=socks5t://127.0.0.1:9050 https_proxy=socks5t://127.0.0.1:9050 ./bloat should work. Haven’t tested SOCKS proxies, but HTTP works for sure, Agency’s bloat is wrapped into Privoxy and thus can authorize on Tor/I2P instances.

   • menherahair (menherahair@eientei.org)'s status on Tuesday, 19-Sep-2023 03:48:15 JST menherahair

     in reply to

     • Yukkuri
     @iamtakingiteasy
     > what is the point of forwarding API requests via tor, but leaking your source for the media?
     That's what I'm looking to not do. Bloat doesn't touch the media, it just puts references in the static html and then your *browser* grabs these. But the browser needs to access html provided locally by bloat too, so can't just plug the whole thing to tor, need the PAC file. I guess I should note I've never used one of these before, and too lazy/busy to look up how it works and if it can fuck up now; would appreciate any expertise here.
     
     Env vars sound good, just wanted to hear they work fine before working out the plumbing really. Thanks guys.
      likes this.
   • Yukkuri (iamtakingiteasy@eientei.org)'s status on Tuesday, 19-Sep-2023 03:48:16 JST Yukkuri

     in reply to
     @menherahair what is the point of forwarding API requests via tor, but leaking your source for the media? Go HTTP client should respect HTTP_PROXY environment variable and you can probably additionally customize sources to use different instances of *http.Client for API and media requests if you indeed want separate handling.