add tor-snowflake script

2025-12-26 14:01:14 +01:00 · 2025-12-26 14:01:14 +01:00 · 18f23497b4
commit 18f23497b4
parent 3417282c37
3 changed files with 182 additions and 0 deletions
--- a/ct/tor-snowflake.sh
+++ b/ct/tor-snowflake.sh
@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: KernelSailor
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://snowflake.torproject.org/
+
+APP="tor-snowflake"
+var_tags="privacy;proxy;tor"
+var_cpu="1"
+var_ram="512"
+var_disk="4"
+var_os="debian"
+var_version="13"
+var_unprivileged="1"
+var_nesting="0"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/snowflake ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  if ! id snowflake &>/dev/null; then
+    msg_error "snowflake user not found!"
+    exit
+  fi
+
+  msg_info "Updating Container OS"
+  $STD apt-get update
+  $STD apt-get -y upgrade
+  msg_ok "Updated Container OS"
+
+  RELEASE=$(curl -fsSL https://gitlab.torproject.org/api/v4/projects/tpo%2Fanti-censorship%2Fpluggable-transports%2Fsnowflake/releases | jq -r '.[0].tag_name' | sed 's/^v//')
+  if [[ ! -f /opt/${APP}_version.txt ]] || [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt)" ]]; then
+    msg_info "Stopping Service"
+    systemctl stop snowflake-proxy
+    msg_ok "Stopped Service"
+
+    msg_info "Updating Go"
+    source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/tools.func)
+    setup_go
+    msg_ok "Updated Go"
+
+    msg_info "Updating ${APP} to v${RELEASE}"
+    cd /opt/snowflake || exit
+    $STD git fetch --all
+    $STD git checkout "v${RELEASE}"
+    chown -R snowflake:snowflake /opt/snowflake
+    $STD sudo -u snowflake go build -o proxy ./proxy
+    echo "${RELEASE}" >/opt/${APP}_version.txt
+    msg_ok "Updated ${APP} to v${RELEASE}"
+
+    msg_info "Starting Service"
+    systemctl start snowflake-proxy
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}."
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}Tor Snowflake setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Snowflake proxy is running as a systemd service.${CL}"
+echo -e "${INFO}${YW} Check status: systemctl status snowflake-proxy${CL}"
--- a/frontend/public/json/tor-snowflake.json
+++ b/frontend/public/json/tor-snowflake.json
@ -0,0 +1,35 @@
+{
+  "name": "Tor Snowflake",
+  "slug": "tor-snowflake",
+  "categories": [
+    4
+  ],
+  "date_created": "2025-12-19",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": null,
+  "documentation": "https://community.torproject.org/relay/setup/snowflake/standalone/",
+  "website": "https://snowflake.torproject.org/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/tor.webp",
+  "config_path": null,
+  "description": "Snowflake is a pluggable transport that proxies traffic through temporary proxies using WebRTC. Snowflake allows users in censored locations to access the open internet by connecting through volunteer-run proxies. Running a Snowflake proxy helps users circumvent internet censorship by forwarding their traffic through your server.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/tor-snowflake.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 512,
+        "hdd": 4,
+        "os": "debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}
--- a/install/tor-snowflake-install.sh
+++ b/install/tor-snowflake-install.sh
@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: KernelSailor
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://snowflake.torproject.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  ca-certificates \
+  curl \
+  git \
+  jq
+msg_ok "Installed Dependencies"
+
+setup_go
+
+msg_info "Creating snowflake user"
+useradd -r -s /bin/false -d /opt/snowflake snowflake
+msg_ok "Created snowflake user"
+
+msg_info "Building Snowflake Proxy from Source"
+cd /opt || exit
+RELEASE=$(curl -fsSL https://gitlab.torproject.org/api/v4/projects/tpo%2Fanti-censorship%2Fpluggable-transports%2Fsnowflake/releases | jq -r '.[0].tag_name' | sed 's/^v//')
+$STD git clone https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake.git
+cd snowflake || exit
+git config --global --add safe.directory /opt/snowflake
+$STD git checkout "v${RELEASE}"
+chown -R snowflake:snowflake /opt/snowflake
+cd proxy || exit
+$STD sudo -u snowflake go build -o snowflake-proxy .
+cd /opt/snowflake || exit
+echo "${RELEASE}" >/opt/tor-snowflake_version.txt
+msg_ok "Built Snowflake Proxy v${RELEASE}"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/snowflake-proxy.service
+[Unit]
+Description=Snowflake Proxy Service
+Documentation=https://snowflake.torproject.org/
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=snowflake
+Group=snowflake
+WorkingDirectory=/opt/snowflake
+ExecStart=/opt/snowflake/proxy/snowflake-proxy -verbose -unsafe-logging
+Restart=always
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now snowflake-proxy
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc