cpx-ansible/roles/docker_services/tasks/services/tor.yml

# vim: ft=yaml.ansible
---
- name: Deploy Tor Docker container
  community.docker.docker_container:
    name: tor
    state: "{{ 'absent' if stop is defined and stop else 'started' }}"
    restart: "{{ stop is undefined or not stop }}"
    image: goldy/tor-hidden-service:{{ services.tor.version }}
    restart_policy: always
    env:
      # Required by SMP/XFTP server (we're not hosting anonymous services anyway)
      TOR_EXTRA_OPTIONS: |
        HiddenServiceNonAnonymousMode 1
        HiddenServiceSingleHopMode 1

      LINGVA_TOR_SERVICE_HOSTS: 80:lingva:3000
      LINGVA_TOR_SERVICE_VERSION: '3'
      LINGVA_TOR_SERVICE_KEY: "{{ secrets.tor.lingva_key }}"

      SAMSAPTIDEV_TOR_SERVICE_HOSTS: 80:samsapti:80
      SAMSAPTIDEV_TOR_SERVICE_VERSION: '3'
      SAMSAPTIDEV_TOR_SERVICE_KEY: "{{ secrets.tor.samsapti_dev_key }}"

      SEARXNG_TOR_SERVICE_HOSTS: 80:searxng:8080
      SEARXNG_TOR_SERVICE_VERSION: '3'
      SEARXNG_TOR_SERVICE_KEY: "{{ secrets.tor.searxng_key }}"

      SMPSERVER_TOR_SERVICE_HOSTS: 5223:smp-server:5223
      SMPSERVER_TOR_SERVICE_VERSION: '3'
      SMPSERVER_TOR_SERVICE_KEY: "{{ secrets.tor.simplexmq_smp_key }}"

      XFTPSERVER_TOR_SERVICE_HOSTS: 443:xftp-server:443
      XFTPSERVER_TOR_SERVICE_VERSION: '3'
      XFTPSERVER_TOR_SERVICE_KEY: "{{ secrets.tor.simplexmq_xftp_key }}"
    networks:
      - name: tor