Publishing thunix as an onion service: thunixme5v4rnoby.onion

roles/webserver/tasks/main.yml

@@ -6,3 +6,4 @@
 - include: apache.yml
 - include: codedeploy.yml
 - include: apache2-mods.yml
+- include: tor.yml

roles/webserver/tasks/packages.yml

@@ -1,5 +1,24 @@
 # Install apache and accoutrements www, irrespective of what role they might have
 ---
+- name: Add apt key for tor project repo
+  apt_key:
+    url: https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc
+    state: present
+
+- name: Add tor project repo
+  apt_repository:
+    repo: 'deb https://deb.torproject.org/torproject.org stretch main'
+    state: present
+    filename: tor
+    update_cache: yes
+
+- name: Add tor project repo
+  apt_repository:
+    repo: 'deb-src https://deb.torproject.org/torproject.org stretch main'
+    state: present
+    filename: torsrc
+    update_cache: yes
+
 - name: Install packages for webserver
   apt:
     name: "{{ packages }}"
@@ -32,4 +51,6 @@
       - php7.0-xmlrpc
       - php7.0-xsl
       - shellinabox
+      - tor
+      - torsocks
       - yum-utils

roles/webserver/tasks/tor.yml

@@ -0,0 +1,15 @@
+#This play configs tor for us
+---
+- name: Deploy torrc file
+  copy:
+    src: ../files/etc/tor/torrc
+    dest: /etc/tor/torrc
+    owner: root
+    mode: 0644
+
+- name: Deploy hidden service files
+  copy:
+    src: ../files/var/lib/tor/hidden_service/hostname
+    dest: /var/lib/tor/hidden_service/hostname
+    owner: root
+    mode: 0600