Self-Hosting on the Dark Web

Your blog can now be accessed without revealing your IP address or location to anyone.

David Álvarez Rosa has successfully configured and launched his personal blog as a hidden service on the Tor network. This setup makes the website accessible only through the Tor Browser at a .onion address, ensuring anonymity for both the user and the server. The process involved installing Tor, configuring it to create a hidden service directory which stores the server's private key and hostname, and then pointing a local web server to listen on a specific port that Tor forwards traffic to. Rosa also detailed the necessary steps for web server configuration, such as Nginx, disabling TLS and HTTP/2 as Tor handles encryption. Crucially, to avoid absolute links directing users to the clearnet, a separate build of the static site was created with the .onion address as its base URL. This dual-site deployment is automated via a GitHub Actions workflow, ensuring both clearnet and Tor versions remain synchronized.

This move signals a growing trend of individuals and smaller entities leveraging the Tor network for enhanced privacy and censorship resistance in web hosting. By eschewing traditional DNS, IP addresses, and certificate authorities, Rosa demonstrates a more decentralized and secure approach to online publishing, where the .onion address itself is derived from a public key and connections are end-to-end encrypted by Tor. This method offers a robust alternative for content creators who prioritize anonymity and are wary of surveillance or censorship on the public internet.

The technical details provided, including Nginx configuration and static site builds, offer a practical blueprint for others looking to replicate this setup. It highlights how the Tor network's capabilities extend beyond anonymous browsing to enabling private server hosting, making it a valuable tool for activists, journalists, or anyone seeking to operate online with a higher degree of privacy and security. The demonstration of automated dual deployments for clearnet and Tor services also points to more sophisticated integration strategies for hidden services.