summaryrefslogtreecommitdiff
path: root/crates/arti/src/arti-example-config.toml
Commit message (Collapse)AuthorAgeFilesLines
* arti: add an example for onion service "reject" optionNick Mathewson2024-09-261-0/+2
| | | | There was previously no example here.
* arti: Update example config with new keystore configuration.Gabriela Moldovan2024-09-231-10/+8
|
* tor-keymgr: Move keystore config under keystore.primary.Gabriela Moldovan2024-09-231-1/+2
| | | | | The keystore settings only configure the *primary* keystore, so they should be under `keystore.primary`.
* tor-keymgr: added support for specifying keystore kind to ArtiKeystoreConfigMorgan2024-09-201-1/+19
|
* arti: Remove onion service anonymity setting.Gabriela Moldovan2024-09-121-7/+0
| | | | We don't support this yet, see #727.
* Look for memquota configuration in the TorClient configurationIan Jackson2024-09-041-0/+11
| | | | Tests are not entirely trivial and will come in a moment.
* arti: Add the restricted_discovery configuration to the example config.Gabriela Moldovan2024-08-051-0/+33
| | | | This also adds a test for it.
* arti: Note that auto is the same as disabled if vanguards are disabled.Gabriela Moldovan2024-06-031-0/+3
|
* arti: Add vanguards settings to example config.Gabriela Moldovan2024-06-031-0/+13
|
* example-config: Indent transport argumentsNick Mathewson2024-04-021-9/+9
| | | | This will make it possible for our tests to pull them out.
* Fix note in config that claimed onion services weren't implementedNick Mathewson2024-03-271-1/+4
| | | | | Instead, link to documentation, and give the warning about their security.
* hss: Make the limit for streams configurable.Nick Mathewson2024-03-261-3/+1
| | | | Closes #1124.
* Add example unmanaged pluggable transport to config.Nick Mathewson2024-03-141-0/+10
|
* Merge branch 'keystore-dir' into 'main'gabi-2502024-02-211-2/+0
|\ | | | | | | | | | | | | arti, arti-client, tor-keymgr: Remove keystore dir configuration. Closes #1202 See merge request tpo/core/arti!1995
| * arti, arti-client, tor-keymgr: Remove keystore dir configuration.Gabriela Moldovan2024-02-211-2/+0
| | | | | | | | Closes #1202
* | tor-hsservice: config: max_concurrent_streams_per_circuit: comment outIan Jackson2024-02-211-0/+2
|/ | | | | This is not implemented. It is better to have it commented out than providing a knob that isn't connected to anything.
* Add a configuration option for long_lived_ports.Nick Mathewson2024-02-201-0/+7
|
* Clarify onion service example(s) a little more.Nick Mathewson2024-02-081-3/+5
|
* hsrproxy: Temporarily remove ability to config unix addressesNick Mathewson2024-01-161-3/+0
| | | | | | | | I'm taking this out for now since we don't have support for actually making these addresses work, and the current behavior will just ignore connections silently. Closes #1245
* Fix typosDimitris Apostolou2024-01-081-1/+1
|
* arti-example-config: Do not claim that state_dir is unusedIan Jackson2023-12-041-2/+0
| | | | tor-ptmgr uses it, and the key manager too.
* Revert "hsrproxy: Temporarily change the format of ProxyRule."Nick Mathewson2023-11-291-8/+5
| | | | | | | | | | | This reverts commit 21605d2c9e601c3a5099bfd8d8c887cbb3b36c0a. We're doing this because we wanted the configuration of proxy rules to be a 2-tuple, as in `[ "22", "127.0.0.1:22" ]`. But `config` couldn't handle that before, so we temporarily changed it to a string, as in "22 => 127.0.0.1:22". Closes #1058.
* Use a less obtrustive sign to end the onion services config sectionNick Mathewson2023-10-111-2/+0
|
* arti::cfg: tweak narrow() test fn to be more useful.Nick Mathewson2023-10-101-1/+1
| | | | | | | | | It still matches the start pattern in the same way, but it takes the _next_ match of the end pattern after the start pattern, and it allows the end pattern to be absent. This will make the bridge tests a little more robust, and let the onion service tests stop saying BEGIN and END.
* hsrproxy: Temporarily change the format of ProxyRule.Nick Mathewson2023-10-101-5/+8
| | | | | | | | | Since config-rs has a bug breaking its support for nested arrays (see discussion at !1640), we're temporarily changing the format to a single string with a "=>" in the middle. I've opened #1058 to put things back as they were once config-rs is fixed.
* Non-working attempt to test onion service configuration.Nick Mathewson2023-10-031-20/+24
| | | | | | | The problem here is that, for some reason, the proxy_rule configuration doesn't actually work. I suspect a bug in Flatten, since the same configuration works fine if you pass it to the hsrproxy config directly.
* arti: Fix up the example config to use the new onion_services format.Nick Mathewson2023-10-031-6/+5
|
* arti: Make onion_service configuration option pluralNick Mathewson2023-10-031-2/+2
|
* hss: Rename the "name" config field to "nickname".Nick Mathewson2023-10-031-1/+1
|
* arti: Add a list of [[onion_service]]s to the config.Nick Mathewson2023-10-031-0/+47
| | | | There are no tests for parsing it yet.
* Fix typosDimitris Apostolou2023-07-221-6/+6
|
* arti cfg tests: Add keystore to example config.Gabriela Moldovan2023-07-131-0/+20
| | | | Closes #939
* arti config: Remove extraneous whitespace.Gabriela Moldovan2023-07-131-5/+5
|
* arti: Add a `logging.time_granularity` option with 1s default.Nick Mathewson2023-07-061-0/+16
| | | | | | | This lets us provide less information in our logs: in particular, it lets us avoid logging with microsecond precision. Closes #551.
* Turn off HS client connections by defaultIan Jackson2023-06-291-1/+10
| | | | As per IRC discussion, re lack of Vanguards.
* HS configuration: Add retry parameters to configurationIan Jackson2023-06-281-0/+6
| | | | | | | I think these should go in `[circuit_timing]`. That section already has some retry parameters, so is not strictly *timing*. This is not honoured yet.
* HS configuration: Add and honour `allow_onion_addrs` in configurationIan Jackson2023-06-281-0/+3
| | | | | | | We put this in `[address_filter]`. The interaction with the corresponding stream preference is a bit complicated. We must turn the stream pref into a `BoolOrAuto`.
* tor-ptmgr: make configuration use builders, plumb into arti-clienteta2022-11-161-0/+16
| | | | | | | This brings the draft configuration mechanisms in tor-ptmgr in line with the config in other crates, using builders. It also plumbs the config type through into the main `arti-client` config, and adds some example lines to `arti-example-config.toml`.
* bridge config: Clarify that examples are nonfunctionalIan Jackson2022-10-121-0/+2
|
* bridges config example: Add much more example syntaxIan Jackson2022-10-121-4/+14
|
* bridges config example: Add bridges section to example configIan Jackson2022-10-121-0/+21
| | | | | | | This is precisely the text from the original version of !744. There is no implementation yet, so we must add a entry to the exception list in the tests.
* arti: cfg: Rename `*_port` to `*_listen` and change the typeIan Jackson2022-08-251-2/+2
| | | | | | | This commit largely follows the example for resolve_alternative_specs. The difference is that there are two fields, so we use a macro to avoid recapitulating the field names.
* arti: Raise the default console log severity to "info"Nick Mathewson2022-08-251-1/+1
| | | | | Previously we logged at "debug", but that's not meant to user-facing.
* arti: Do not allow running as root.Nick Mathewson2022-08-241-0/+6
| | | | | | This can be overridden with `application.allow_running_as_root`. Part of #523.
* channel: Introduce padding configIan Jackson2022-08-161-1/+13
| | | | | Nothing actually reads this yet, and we also want a client-global default for padding.
* Introduce ChannelConfigIan Jackson2022-08-161-0/+4
| | | | | This commit is just the necessary plumbing. The config is currently empty. We'll add something to it, for padding control, later.
* arti: Add support for process hardeningNick Mathewson2022-08-151-0/+9
| | | | | | | | | | | | | This is a compile-time feature with an associated configuration flag, both enabled by default. When it's turned on, hardening prevents the arti process from dumping core or being attached to by low-privileged processes. (This is a defense-in-depth measure, not an absolute way to prevent attacks. For more information, see [`secmem_proc`](https://docs.rs/secmem-proc/0.1.1/secmem_proc/).) Closes #364.
* Rename download_tolerance to directory_toleranceNick Mathewson2022-07-221-2/+5
| | | | Closes #503.
* Add a configuration option for reachable_addrsNick Mathewson2022-06-171-0/+10
| | | | (This doesn't do anything yet.)
* mistrust: Canonicalise prefix from Some("") to NoneIan Jackson2022-05-301-0/+1
| | | | | This allows us to add the proper default example to the arti example config file.
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 11:23:01 +0000