{"id":13521592,"url":"https://github.com/alecmuffett/eotk","last_synced_at":"2026-02-09T13:06:05.843Z","repository":{"id":16772145,"uuid":"80601058","full_name":"alecmuffett/eotk","owner":"alecmuffett","description":"Enterprise Onion Toolkit","archived":false,"fork":false,"pushed_at":"2024-02-09T02:12:54.000Z","size":4466,"stargazers_count":785,"open_issues_count":19,"forks_count":105,"subscribers_count":47,"default_branch":"master","last_synced_at":"2025-08-12T06:39:07.533Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Awk","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alecmuffett.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2017-02-01T08:19:04.000Z","updated_at":"2025-08-01T01:49:13.000Z","dependencies_parsed_at":"2024-04-23T19:06:10.748Z","dependency_job_id":"067ac5b0-65c7-4101-9367-e366857b8ad5","html_url":"https://github.com/alecmuffett/eotk","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/alecmuffett/eotk","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alecmuffett%2Feotk","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alecmuffett%2Feotk/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alecmuffett%2Feotk/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alecmuffett%2Feotk/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alecmuffett","download_url":"https://codeload.github.com/alecmuffett/eotk/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alecmuffett%2Feotk/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29266217,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-09T12:53:16.161Z","status":"ssl_error","status_checked_at":"2026-02-09T12:52:30.244Z","response_time":56,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T06:00:36.261Z","updated_at":"2026-02-09T13:06:05.827Z","avatar_url":"https://github.com/alecmuffett.png","language":"Awk","funding_links":[],"categories":["\u003ca id=\"1a9934198e37d6d06b881705b863afc8\"\u003e\u003c/a\u003e通信\u0026\u0026代理\u0026\u0026反向代理\u0026\u0026隧道","\u003ca id=\"6e80463404d46f0493cf6e84597e4b5c\"\u003e\u003c/a\u003e工具","Uncategorized","Applications"],"sub_categories":["\u003ca id=\"b03a7c05fd5b154ad593b6327578718b\"\u003e\u003c/a\u003e匿名网络","\u003ca id=\"e99ba5f3de02f68412b13ca718a0afb6\"\u003e\u003c/a\u003eTor\u0026\u0026\u0026Onion\u0026\u0026洋葱","Uncategorized","Other applications"],"readme":"# The Enterprise Onion Toolkit\n![banner image](docs.d/hello-onion-text.png)\n\n## :warning: Important HTTPS-related Annoucement: March 2022 :warning:\n\nI've landed a small breaking change in order to better-support HARICA as a certificate provider,\nbut also for better usability; this change impacts any project with a multi-onion\nEV certificate from Digicert.\n\n* v3 onion addresses used in pathnames are now truncated at 20 chars\n  of onion, rather than 30 overall, to make shorter pathnames for unix\n  domain sockets\n* onion scratch-directory name changes:\n  * was: `projects.d/tweep.d/abcdefghijklmnopqrstuvwxyza-v3.d/port-80.sock`\n  * now: `projects.d/tweep.d/abcdefghijklmnopqrst-v3.d/port-80.sock`\n  * :warning: this means that some scratch directories may be are remade, \n    so a full restart is advisable after updating\n* https certificate path-name changes\n  * was: HTTPS certificate files used the full onion address\n  * now: onion HTTPS certificates are now expected to be installed in\n    per-onion-truncated-at-20 pathnames: e.g. for each ONIONADDRESS in\n    PROJECTNAME:\n    * `/projects.d/PROJECTNAME.d/ssl.d/ONIONADDRFIRST20CHAR-v3.onion.cert`\n    * `/projects.d/PROJECTNAME.d/ssl.d/ONIONADDRFIRST20CHAR-v3.onion.pem`\n  * :warning: this means that you will need to rename pre-existing certificate \n    `cert` and `pem` files after you update and reconfigure; \n  * :warning: **if you fail to do this you will experience \"self-signed certificate\" warnings**\n* if you are using 'multi' certificates (such as some Digicert EV) where a\n  single certificate contains all SubjectAltNames for 2+ onion\n  addresses that are part of a single project:\n  * :warning: do `set ssl_cert_each_onion 0` in the configuration, to re-enable\n    multi cert handling\n  * :warning: the names of the certificate files must be changed:\n    * was: filenames used to be\n      `projects.d/PROJECTNAME.d/ssl.d/PRIMARYONIONADDRESSWASHERE.{pem,cert}`\n    * now: multi-certificates now must be named with the more meaningful\n      `projects.d/PROJECTNAME.d/ssl.d/PROJECTNAME.{pem,cert}`\n\nIf you have any issues, please reach out to @alecmuffett on Twitter, or log an issue above.\n\n## Primary Supported Platforms\n\n* Ubuntu 20.04LTS, Latest Updates\n* OSX Mojave with Homebrew, Latest Updates\n* Raspbian Stretch/Stretch-Lite, Latest Updates\n\n## Maillist / Group\n\nGeneral discussion mailllist: deployment, tweaks and tuning:\n\n* mailto:eotk-users+subscribe@googlegroups.com (via email)\n* https://groups.google.com/group/eotk-users/subscribe (via web)\n\nNB: bugs should be reported through `Issues`, above.\n\n### EOTK In the News\n\n* Apr 2021 [The Intercept launches onionsite using EOTK](https://theintercept.com/2021/04/28/tor-browser-onion/)\n* Oct 2020 [Brave browser launches onionsite using EOTK](https://brave.com/new-onion-service/)\n* Oct 2019 [BBC News launches 'dark web' Tor mirror](https://www.bbc.co.uk/news/technology-50150981)\n* Oct 2019 [BBC launches dark web news site in bid to dodge censors](https://www.cityam.com/bbc-launches-dark-web-news-site-in-bid-to-dodge-censors/)\n* Oct 2019 [Tor blimey, Auntie! BBC launches dedicated dark web mirror site](https://www.theregister.co.uk/2019/10/24/beeb_launches_dedicated_dark_web_site/)\n* Oct 2019 [BBC News heads to the dark web with new Tor mirror\n](https://www.theverge.com/2019/10/24/20930085/bbc-news-dark-web-tor-the-onion-browser-secure-censorship)\n* Jan 2018 [Volunteer Spotlight: Alec Helps Companies Activate Onion Services\n](https://blog.torproject.org/volunteer-spotlight-alec-helps-companies-activate-onion-services)\n* Nov 2017 [Un service Wikipedia pour le Dark Web a été lancé par un ingénieur en sécurité](https://www.developpez.com/actu/175523/Un-service-Wikipedia-pour-le-Dark-Web-a-ete-lance-par-un-ingenieur-en-securite-afin-de-contourner-la-censure-dans-certains-pays/)\n* Nov 2017 [Δημιουργήθηκε σκοτεινή έκδοση της Βικιπαίδειας για ανθρώπους σε λογοκριμένα καθεστώτα](https://texnologia.net/dhmiourgithike-skoteinh-ekdosh-ths-wikipedia-gia-anthropous-se-logokrimena-kathestota/2017/11)\n* Nov 2017 [A security expert built an unofficial Wikipedia for the dark web](https://www.engadget.com/2017/11/25/a-security-expert-built-an-unofficial-wikipedia-for-the-dark-web/)\n* Nov 2017 [There’s Now a Dark Web Version of Wikipedia](https://motherboard.vice.com/en_us/article/7x4g4b/theres-now-a-dark-web-version-of-wikipedia-tor-alec-muffett)\n* Oct 2017 [The New York Times is Now Available as a Tor Onion Service](https://open.nytimes.com/https-open-nytimes-com-the-new-york-times-as-a-tor-onion-service-e0d0b67b7482)\n* Apr 2017 [This Company Will Create Your Own Tor Hidden Service](https://motherboard.vice.com/en_us/article/this-company-will-create-your-own-tor-hidden-service)\n* Feb 2017 [New Tool Takes Mere Minutes to Create Dark Web Version of Any Site](https://motherboard.vice.com/en_us/article/new-tool-takes-mere-minutes-to-create-dark-web-version-of-any-site)\n\n## Introduction\n\nEOTK provides a tool for deploying HTTP and HTTPS onion sites to\nprovide official onion-networking presences for popular websites.\n\nThe result is essentially a \"man in the middle\" proxy; you should set\nthem up only for your own sites, or for sites which do not require\nlogin credentials of any kind.\n\n## Installation\n\nPlease refer to the [How To Install](docs.d/HOW-TO-INSTALL.md) guide,\nand the other documents in [that folder](docs.d/).\n\n## Help I'm Stuck!\n\nPing @alecmuffett on Twitter, or log an `Issue`, above.\n\n## Important Note About Anonymity\n\nThe presumed use-case of EOTK is that you have an already-public\nwebsite and you wish to give it a corresponding Onion address.\n\nA lot of people mistakenly believe that Tor Onion Networking is \"all\nabout anonymity\" - which is incorrect, since it also includes:\n\n* extra privacy\n* identity/surety of to whom you are connected\n* freedom from oversight/network surveillance\n* anti-blocking, and...\n* enhanced integrity/tamperproofing\n\n...none of which are the same as \"anonymity\", but all of which are\nvaluable qualities to add to communications.\n\nFurther: setting up an Onion address can provide less contention, more\nspeed \u0026 more bandwidth to people accessing your site than they would\nget by using Tor \"Exit Nodes\".\n\nIf you set up EOTK in its intended mode then your resulting site is\nalmost certainly not going to be anonymous; for one thing your brand\nname (etc) will likely be plastered all over it.\n\nIf you want to set up a server which includes anonymity **as well as**\nall of the aforementioned qualities, you [want to be reading an\nentirely different document,\ninstead](https://github.com/alecmuffett/the-onion-diaries/blob/master/basic-production-onion-server.md).\n\n## Acknowledgements\n\nEOTK stands largely on the experience of work I led at Facebook to\ncreate `www.facebookcorewwwi.onion`, but it owes a *huge* debt to\n[Mike Tigas](https://github.com/mtigas)'s work at ProPublica to put\ntheir site into Onionspace through using NGINX as a rewriting proxy --\nand that [he wrote the whole experience up in great\ndetail](https://www.propublica.org/nerds/item/a-more-secure-and-anonymous-propublica-using-tor-hidden-services)\nincluding [sample config\nfiles](https://gist.github.com/mtigas/9a7425dfdacda15790b2).\n\nReading this prodded me to learn about NGINX and then aim to shrink \u0026\ngenericise the solution; so thanks, Mike!\n\nAlso, thanks go to Christopher Weatherhead for acting as a local NGINX\n*sounding board* :-)\n\nAnd back in history: Michal Nánási, Matt Jones, Trevor Pottinger and\nthe rest of the FB-over-Tor team.  Hugs.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falecmuffett%2Feotk","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Falecmuffett%2Feotk","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falecmuffett%2Feotk/lists"}