Deploy Tor Snowflake proxy on ringtail #311

Merged
eblume merged 3 commits from deploy-snowflake-proxy into main 2026-03-24 20:51:41 -07:00

3 commits

Author SHA1 Message Date
86226c94db Add geoip databases for snowflake proxy country metrics
NixOS doesn't have /usr/share/tor/geoip — point the proxy at
pkgs.tor.geoip derivation paths instead.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 20:48:28 -07:00
508f7a957d Add Grafana dashboard and Prometheus scraping for snowflake proxy
Bind metrics to 0.0.0.0 so Alloy can scrape from k8s, add HOST_IP
downward API env var to alloy-ringtail DaemonSet, and add a dashboard
with connection rate, traffic rate, country breakdown, and process memory.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 20:44:56 -07:00
f2362086ef Deploy Tor Snowflake proxy on ringtail
Add snowflake-proxy as a native systemd service on ringtail to help
censored users reach the Tor network. This is a bridge proxy, not an
exit node — traffic exits through Tor exit nodes elsewhere.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 20:37:42 -07:00