From 574a23bf5afe8f44b59a0b56bfd7ba556bcfee35 Mon Sep 17 00:00:00 2001 From: idk Date: Wed, 4 Jan 2023 23:16:22 +0000 Subject: [PATCH] split out policy section --- .../get-involved/guides/reseed-debian.html | 25 ++-- .../get-involved/guides/reseed-plugin.html | 7 +- .../get-involved/guides/reseed-policy.html | 51 +++++++ .../get-involved/guides/reseed-proxy.html | 7 +- .../site/get-involved/guides/reseed.html | 136 +++++++++++++++++- 5 files changed, 212 insertions(+), 14 deletions(-) create mode 100644 i2p2www/pages/site/get-involved/guides/reseed-policy.html diff --git a/i2p2www/pages/site/get-involved/guides/reseed-debian.html b/i2p2www/pages/site/get-involved/guides/reseed-debian.html index bb2934e1..07eee93c 100644 --- a/i2p2www/pages/site/get-involved/guides/reseed-debian.html +++ b/i2p2www/pages/site/get-involved/guides/reseed-debian.html @@ -1,8 +1,15 @@ {% extends "global/layout.html" %} {% block title %}{{ _('How to Set up a Reseed Server using a Debian Package') }}{% endblock %} -{% block lastupdated %}2023-1{% endblock %} +{% block lastupdated %}2023-01{% endblock %} {% block content %} +

{% trans %}General Information{% endtrans %}

+ +

To read the reseed policy, follow this link.

+

Please see the general information for all reseed servers in addition to reading this section.

+ +

{% trans %}Reseed on Debian using {% endtrans %} checkinstall, apt-get

+

It is possible to easily and automatically configure a reseed server with a self-signed certificate on any Debian-based operating system, @@ -26,7 +33,7 @@

If you do not wish to build from source, you can use a binary package - from me. This package is built from this repo with the + from me(idk). This package is built from this repo with the make checkinstall @@ -40,7 +47,7 @@ 


 wget https://github.com/eyedeekay/reseed-tools/releases/download/v0.2.30/reseed-tools_0.2.30-1_amd64.deb
-# Obtain the checksum from the release web page
+# Obtain the checksum from the release web page and store it in the SHA256SUMS file
 echo "38941246e980dfc0456e066f514fc96a4ba25d25a7ef993abd75130770fa4d4d reseed-tools_0.2.30-1_amd64.deb" > SHA256SUMS
 sha256sums -c SHA256SUMS
 sudo apt-get install ./reseed-tools_0.2.30-1_amd64.deb
@@ -58,7 +65,7 @@ sudo apt-get install ./reseed-tools_0.2.30-1_amd64.deb
     repository.
   

   

-    \
+
     
       1.
     
@@ -68,7 +75,7 @@ sudo apt-get install ./reseed-tools_0.2.30-1_amd64.deb
 sudo apt-get install fakeroot checkinstall go git make

- \ + 2. @@ -78,7 +85,7 @@ sudo apt-get install fakeroot checkinstall go git make git clone https://i2pgit.org/idk/reseed-tools ~/go/src/i2pgit.org/idk/reseed-tools

- \ + 3. @@ -97,7 +104,7 @@ cd ~/go/src/i2pgit.org/idk/reseed-tools make checkinstall

- \ + 4. @@ -114,7 +121,7 @@ sudo apt-get install ./reseed-tools_*.deb Running the Service

- \ + 1. @@ -131,7 +138,7 @@ sudo systemctl start i2p sudo service i2p start

- \ + 2. diff --git a/i2p2www/pages/site/get-involved/guides/reseed-plugin.html b/i2p2www/pages/site/get-involved/guides/reseed-plugin.html index cb432425..afedfdad 100644 --- a/i2p2www/pages/site/get-involved/guides/reseed-plugin.html +++ b/i2p2www/pages/site/get-involved/guides/reseed-plugin.html @@ -1,10 +1,13 @@ {% extends "global/layout.html" %} {% block title %}{{ _('How to Set up a Reseed Server using an I2P Console Plugin') }}{% endblock %} -{% block lastupdated %}2023-1{% endblock %} +{% block lastupdated %}2023-01{% endblock %} {% block content %}

{% trans %}General Information{% endtrans %}

-

{% trans %}Installation from Source Code{% endtrans %}

+

To read the reseed policy, follow this link.

+

Please see the general information for all reseed servers in addition to reading this section.

+ +

{% trans %}Installation from an I2P console plugin{% endtrans %}

{% endblock %} diff --git a/i2p2www/pages/site/get-involved/guides/reseed-policy.html b/i2p2www/pages/site/get-involved/guides/reseed-policy.html new file mode 100644 index 00000000..7addef24 --- /dev/null +++ b/i2p2www/pages/site/get-involved/guides/reseed-policy.html @@ -0,0 +1,51 @@ +{% extends "global/layout.html" %} +{% block title %}{{ _('How to Set up a Reseed Server using an I2P Console Plugin') }}{% endblock %} +{% block lastupdated %}2023-01{% endblock %} +{% block content %} + +

{% trans %}Reseed Policy Information{% endtrans %}

+ +

{% trans -%} +When your setup is complete and ready for testing, we will need the HTTPS URL, +the SSL public key certificate (only if selfsigned), and the su3 public key certificate. +After testing is complete, these will be added to the hardcoded entries in the Java and C++ routers in the next release, +and you will start seeing traffic. +We also will need your email address so we may continue to contact you about reseed administration issues. +The email will not be made public but will be known to the other reseed operators. +You should expect that your nick or name and its association with that URL or IP will become public. +{%- endtrans %}

+ +

{% trans %}Information Required{% endtrans %}

+ +

{% trans -%} +When your setup is complete and ready for testing, we will need the HTTPS URL, +the SSL public key certificate (only if selfsigned), and the su3 public key certificate. +After testing is complete, these will be added to the hardcoded entries in the Java and C++ routers in the next release, +and you will start seeing traffic. +We also will need your email address so we may continue to contact you about reseed administration issues. +The email will not be made public but will be known to the other reseed operators. +You should expect that your nick or name and its association with that URL or IP will become public. +{%- endtrans %}

+ +

{% trans %}Privacy Policy{% endtrans %}

+ +

{% trans -%} +A reseed operator is a trusted role in the network. +While we do not yet have a formal privacy policy, you must ensure the privacy of our users +by not publicizing logs or IPs found in those logs, except as necessary to discuss administration issues with the I2P reseed team. +{%- endtrans %}

+ +

{% trans %}Financial Support{% endtrans %}

+ +

{% trans -%} +Modest financial support may be available to those running reseed servers. +This support would be in partial reimbursement for your server costs. +Support will not be paid in advance and will probably not cover all your expenses. +Support is only available to those who have been running reseed servers in good standing for several months, and is based on actual need. +{%- endtrans %}

+ +

{% trans -%} +If you would like to discuss support, please contact echelon and CC: zzz +{%- endtrans %}

+ +{% endblock %} diff --git a/i2p2www/pages/site/get-involved/guides/reseed-proxy.html b/i2p2www/pages/site/get-involved/guides/reseed-proxy.html index 3632ce58..42a4bb28 100644 --- a/i2p2www/pages/site/get-involved/guides/reseed-proxy.html +++ b/i2p2www/pages/site/get-involved/guides/reseed-proxy.html @@ -1,10 +1,13 @@ {% extends "global/layout.html" %} {% block title %}{{ _('How to Set up a Reseed Server using a Reverse Proxy') }}{% endblock %} -{% block lastupdated %}2023-1{% endblock %} +{% block lastupdated %}2023-01{% endblock %} {% block content %}

{% trans %}General Information{% endtrans %}

-

{% trans %}Installation from Source Code{% endtrans %}

+

To read the reseed policy, follow this link.

+

Please see the general information for all reseed servers in addition to reading this section.

+ +

{% trans %}Reseed Installation using a Reverse Proxy{% endtrans %}

{% endblock %} diff --git a/i2p2www/pages/site/get-involved/guides/reseed.html b/i2p2www/pages/site/get-involved/guides/reseed.html index 32a2d7a4..acf5e307 100644 --- a/i2p2www/pages/site/get-involved/guides/reseed.html +++ b/i2p2www/pages/site/get-involved/guides/reseed.html @@ -1,10 +1,144 @@ {% extends "global/layout.html" %} {% block title %}{{ _('How to Set up a Reseed Server') }}{% endblock %} -{% block lastupdated %}2023-1{% endblock %} +{% block lastupdated %}2023-01{% endblock %} {% block content %}

{% trans %}General Information{% endtrans %}

+

{% trans -%} + Thank you for volunteering to run an I2P reseed server. + "Reseeding" is our term for bootstrapping new routers into the network. + New routers fetch a bundle of peer references, or "router infos", from one or more of a hardcoded list of HTTPS URLs. + {%- endtrans %}

+ +

{% trans %}Requirements{% endtrans %}

+ +

{% trans -%} + A reseed server must be reachable on the public internet. + It must use TLS, but it may use a self-signed TLS certificate if the reseed administrator is in communication with the router development team. + The administrator of the reseed server should provide contact information in order to respond to issues and be in touch with the I2P team. + {%- endtrans %}

+ +

{% trans %}More Information{% endtrans %}

+ +

To read the reseed policy, follow this link.

+

Are you a Debian user? You can find Debian-Specific instructions here.

+

Would you like to use an I2P Plugin? I2P Plugin instructions are available here.

+

Click here for instructions on using a reverse proxy such as nginx or Apache2.

+

To read the old instructions, follow this link.

+

{% trans %}Installation from Source Code{% endtrans %}

+

+ Reseed Tools is a pure Go application which can be built statically without CGO. + It makes use of Go Modules. + A Makefile is provided with some targets which are convenient helpers for generating binaries, especially for production and release purposes. +

+

+ + + 1. + + Install the build dependencies +

+

+sudo apt-get install go git make
+
+

+ + + 2. + + Clone the source code +

+

+git clone https://i2pgit.org/idk/reseed-tools ~/go/src/i2pgit.org/idk/reseed-tools
+
+

+ + + 3. + + Generate the + + binaries + + package using the + + make build + + target +

+

+cd ~/go/src/i2pgit.org/idk/reseed-tools
+make build
+
+

+ + + 4. + + Install the binary and the config files +

+

+sudo make install
+
+

+ Running the Service +

+

+ + + 1. + + First, ensure that the I2P service is already running. The longer the better, + if you have to re-start the service, or if the service has very few peers, allow it to + run for 24 hours before advancing to step + + 2. + +

+

+sudo systemctl start i2p
+# or, if you use sysvinit
+sudo service i2p start
+
+

+ + + 2. + + Once your I2P router is “Well-Integrated,” start the reseed service. +

+

+sudo systemctl start reseed
+# or, if you use sysvinit
+sudo service reseed start
+
+

+ Your reseed will auto-configure with a self-signed certificate on port + + :8443 + + . The + certificates themselves are available in + + /var/lib/i2p/i2p-config/reseed + + . When + you are ready, you should copy the + + *.crt + + files from that directory and share them + witth the I2P community on + + + zzz.i2p + + + . These will allow I2P users + to authenticate your reseed services and secure the I2P network. +

+ {% endblock %}