From 6cd905681d41acefc927a2472967a145a6d22cea Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Thu, 27 Jul 2023 00:17:26 +0200
Subject: [PATCH] feat(tor): Improve tor deployment with readiness probe
---
apps/k8s01/tor/deployment.yaml | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/apps/k8s01/tor/deployment.yaml b/apps/k8s01/tor/deployment.yaml
index 888c93c0f..c981296aa 100644
--- a/apps/k8s01/tor/deployment.yaml
+++ b/apps/k8s01/tor/deployment.yaml
@@ -36,6 +36,15 @@ spec:
args:
- --SOCKSPort
- 0.0.0.0:9050
+ # We only allow 443 and 80 to go out
+ - --FascistFirewall
+ - 1
+ readinessProbe:
+ exec:
+ command:
+ - sh
+ - -c
+ - curl -v --proxy socks5://127.0.0.1:9050 http://www.gstatic.com/generate_204 2>&1 | grep 'HTTP/1.1 204 No Content'
ports:
- name: socks
containerPort: 9050
--
GitLab