在离岸VPS上部署 Tor Relay

#!/usr/bin/env bash
# Non-exit Tor relay on Ubuntu 24.04 (Noble). Run as root or with sudo.
set -euo pipefail

# 1) Install Tor from the official Tor Project apt repo (newer than Ubuntu's)
apt-get update
apt-get install -y apt-transport-https gpg curl lsb-release
curl -fsSL https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc \
  | gpg --dearmor -o /usr/share/keyrings/tor-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org $(lsb_release -cs) main" \
  > /etc/apt/sources.list.d/tor.list
apt-get update
apt-get install -y tor deb.torproject.org-keyring nyx

# 2) Configure a NON-EXIT relay (safe default: never terminates traffic)
cat > /etc/tor/torrc <<'EOF'
Nickname        chainvpsrelay
# ORPort 443 improves reachability for clients behind restrictive firewalls.
ORPort          443
ORPort          [::]:443
# Non-exit relay: do NOT exit traffic to the clearnet.
ExitRelay       0
IPv6Exit        0
ExitPolicy      reject *:*
# ContactInfo lets the Tor project reach you about issues. Use a role address.
ContactInfo     tor-relay-ops <[email protected]>
# Optional throughput cap (bytes). Comment out to donate full unmetered link.
# RelayBandwidthRate  20 MBytes
# RelayBandwidthBurst 40 MBytes
Log             notice syslog
User            debian-tor
EOF

# 3) Open the firewall for the ORPort (adjust if you changed it above)
if command -v ufw >/dev/null 2>&1; then
  ufw allow 443/tcp comment 'Tor ORPort'
fi

# 4) Enable and start
systemctl enable --now tor@default
sleep 5
systemctl status tor@default --no-pager || true

echo "Relay starting. Watch bootstrap + fingerprint:  journalctl -u tor@default -f"
echo "Live console:  nyx"
echo "Your relay fingerprint:  cat /var/lib/tor/fingerprint"