root/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

further changes

Browse source
This commit is contained in:
root 2025-11-06 00:36:02 +00:00
parent cc806b713b
commit 3174825d6a
8 changed files with 56 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

6
services/crypto.nix
View file

@ -11,6 +11,12 @@
}; };
kubo.enable = true; kubo.enable = true;
tor.relay.onionServices."site".map = [
8333
18080
4001
];
}; };
networking.firewall.allowedTCPPorts = [8333 18080 4001]; networking.firewall.allowedTCPPorts = [8333 18080 4001];

1
services/default.nix
View file

@ -11,5 +11,6 @@
./crypto.nix ./crypto.nix
./vaultwarden.nix ./vaultwarden.nix
./mailserver.nix ./mailserver.nix
./tor.nix
]; ];
} }

10
services/tor.nix Normal file
View file

@ -0,0 +1,10 @@
{
services.tor = {
enable = true;
relay = {
enable = true;
role = "relay";
};
settings.Nickname = "Distrust";
};
}

BIN
site/background.png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 561 KiB

30
site/index.html
View file

@ -1,6 +1,7 @@
<!DOCTYPE html> <!DOCTYPE html>
<head> <head>
<title>distrust.network</title> <title>Distrust</title>
<link rel="icon" href="logo.png">
<style> <style>
.centered { .centered {
position: absolute; position: absolute;
@ -23,12 +24,24 @@
} }
body { body {
background-color: #121212; background-color: #121212;
background: url("/background.png");
color: #FFFFFF; color: #FFFFFF;
} }
a { a {
color: #a2a2a2; color: plum;
text-decoration: underline; text-decoration: underline;
} }
hr {
height: 0.1rem;
background-color: plum;
border: none;
}
li::marker {
color: plum;
}
li {
list-style-type: "> ";
}
.privacy-policy { .privacy-policy {
float: right; float: right;
} }
@ -36,13 +49,15 @@
</head> </head>
<body> <body>
<div class="centered"> <div class="centered">
<h1>distrust.network</h1> <h1>Distrust</h1>
<hr> <hr>
<p><i>"The mask of self-deception was no longer a mask for me, it was a part of me."</i> <small>Robert W. Chambers</small></p> <p><i>"The mask of self-deception was no longer a mask for me, it was a part of me."</i> <small>Robert W. Chambers</small></p>
<h3>About</h3> <h3>About</h3>
<hr> <hr>
<p><code>distrust.network</code> works off one simple principle:</p> <p>The Distrust family of services works off one simple principle:</p>
<i>> I don't know you, and I don't want to.</i> <ul>
<li><i> I don't know you, and I don't want to.</i></li>
</ul>
<p>Pricing starts at $1 per month (or however you'd like to pay, any extra being a tip), and upgrades to lifetime access as soon as you have paid $100 total. Payment is in <a title="I will reply with an address to send the money to once you request an account.">BTC only</a>.</p> <p>Pricing starts at $1 per month (or however you'd like to pay, any extra being a tip), and upgrades to lifetime access as soon as you have paid $100 total. Payment is in <a title="I will reply with an address to send the money to once you request an account.">BTC only</a>.</p>
<p>We provide a plethora of services, available through either <a href="http://distrustdtp5qgbk2firlzfkkmu5p6v6acuh2ox454zd2i3ujdqad5yd.onion/">TOR</a> or the <a href="https://distrust.network/">clearnet</a>. These include (and <i>are</i> limited to):</p> <p>We provide a plethora of services, available through either <a href="http://distrustdtp5qgbk2firlzfkkmu5p6v6acuh2ox454zd2i3ujdqad5yd.onion/">TOR</a> or the <a href="https://distrust.network/">clearnet</a>. These include (and <i>are</i> limited to):</p>
<ul> <ul>
@ -54,10 +69,9 @@
<li>Forgejo <small><a href="http://cr27k6asjs7skvjxs6smhqfam3wlvmft2f3iins44k6p6rmmfyolobqd.onion/">[tor]</a> <a href="https://git.distrust.network">[clearnet]</a></small></li> <li>Forgejo <small><a href="http://cr27k6asjs7skvjxs6smhqfam3wlvmft2f3iins44k6p6rmmfyolobqd.onion/">[tor]</a> <a href="https://git.distrust.network">[clearnet]</a></small></li>
<li>Vaultwarden <small><a href="http://gfoqwlo4nmhcywzzyhfanhkf7hz64lkjayngfyrpbd7ohaucu3q4znqd.onion/">[tor]</a> <a href="https://vault.distrust.network">[clearnet]</a> <a title="Once you have logged in for the first time, check your inbox for an invite.">[hover]</a></small></li> <li>Vaultwarden <small><a href="http://gfoqwlo4nmhcywzzyhfanhkf7hz64lkjayngfyrpbd7ohaucu3q4znqd.onion/">[tor]</a> <a href="https://vault.distrust.network">[clearnet]</a> <a title="Once you have logged in for the first time, check your inbox for an invite.">[hover]</a></small></li>
<li>Microbin (Paste) <small><a href="http://s4h5nfnwwhzku55opxlqouobioibx4htwygnp2l4fkp256lur5s53rad.onion">[tor]</a> <a href="https://paste.distrust.network/">[clearnet]</a></small></li> <li>Microbin (Paste) <small><a href="http://s4h5nfnwwhzku55opxlqouobioibx4htwygnp2l4fkp256lur5s53rad.onion">[tor]</a> <a href="https://paste.distrust.network/">[clearnet]</a></small></li>
<li>Public TOR SOCKS5 Proxy <a title="You can connect to it at distrust.network:9050">[hover]</a></li>
</ul> </ul>
<p>We also host nodes for <a href="https://bitcoin.org/">Bitcoin (BTC)</a>, <a href="https://www.getmonero.org/">Monero (XMR)</a>, and <a href="https://ipfs.tech/">IPFS</a> to strengthen their networks.</p> <p>We also host nodes for <a href="https://bitcoin.org/" title="157.173.124.100:8333">Bitcoin (BTC)</a>, <a href="https://www.getmonero.org/" title="157.173.124.100:18080">Monero (XMR)</a>, <a href="https://ipfs.tech/">IPFS</a>, and a <a href="https://www.torproject.org/">TOR relay</a> to strengthen their respective networks. They are all available over clearnet and TOR using this main webpages <a title="157.173.124.100 & 2a02:c207:2288:2816::1">IP</a> and <a href="http://distrustdtp5qgbk2firlzfkkmu5p6v6acuh2ox454zd2i3ujdqad5yd.onion/">.onion URL</a> on ports 8333, 18080, and 4001 respectively.</p>
<p>All services have a strict no-metrics policy, with logs being kept for at most 1 hour (for debugging purposes). Where it is difficult to configure this in a service, logs are directly piped and/or symlinked to <code>/dev/null</code>.</p> <p>All services have a strict no-metrics policy, with logs being kept for at most 1 hour (for debugging purposes).</p>
<p>The server runs a hardened NixOS config, and is updated when appropriate for any security/hardening tweaks. This NixOS config is auditable and freely accessible over <a href="http://cr27k6asjs7skvjxs6smhqfam3wlvmft2f3iins44k6p6rmmfyolobqd.onion/root/flake">TOR</a> and <a href="https://git.distrust.network/root/flake">clearnet</a>.</p> <p>The server runs a hardened NixOS config, and is updated when appropriate for any security/hardening tweaks. This NixOS config is auditable and freely accessible over <a href="http://cr27k6asjs7skvjxs6smhqfam3wlvmft2f3iins44k6p6rmmfyolobqd.onion/root/flake">TOR</a> and <a href="https://git.distrust.network/root/flake">clearnet</a>.</p>
<p>If you are interested, <a href="mailto:root@distrust.network?subject=ACCOUNT%20REQUEST&body=Replace%20this%20email%20body%20with%20your%20desired%20username.">email me</a> with your desired username.</p> <p>If you are interested, <a href="mailto:root@distrust.network?subject=ACCOUNT%20REQUEST&body=Replace%20this%20email%20body%20with%20your%20desired%20username.">email me</a> with your desired username.</p>
<hr> <hr>

BIN
site/logo.png Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 105 KiB

17
site/privacy-policy.html
View file

@ -1,6 +1,7 @@
<!DOCTYPE html> <!DOCTYPE html>
<head> <head>
<title>distrust.network - Privacy Policy</title> <title>Distrust - Privacy Policy</title>
<link rel="icon" href="logo.png">
<style> <style>
.centered { .centered {
position: absolute; position: absolute;
@ -23,12 +24,24 @@
} }
body { body {
background-color: #121212; background-color: #121212;
background: url("/background.png");
color: #FFFFFF; color: #FFFFFF;
} }
a { a {
color: #a2a2a2; color: plum;
text-decoration: underline; text-decoration: underline;
} }
hr {
height: 0.1rem;
background-color: plum;
border: none;
}
li::marker {
color: plum;
}
li {
list-style-type: "> ";
}
.privacy-policy { .privacy-policy {
float: right; float: right;
} }

1
system/configuration.nix
View file

@ -16,6 +16,7 @@ in {
openssh = { openssh = {
enable = true; enable = true;
ports = [292]; ports = [292];
settings.PasswordAuthentication = false;
}; };
fail2ban.enable = true; fail2ban.enable = true;
endlessh = { endlessh = {