deploy(tor-hidden-services): set HiddenServicePoWDefensesEnabled for …

…the Source Interface (cherry picked from commit a232a54)
freedomofpress · Jun 13, 2024 · ed554f6 · ed554f6
1 parent 299e4d0
commit ed554f6
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/install_files/ansible-base/roles/tor-hidden-services/templates/torrc b/install_files/ansible-base/roles/tor-hidden-services/templates/torrc
@@ -6,6 +6,10 @@ RunAsDaemon 1
 HiddenServiceDir /var/lib/tor/services/sourcev3
 HiddenServicePort 80 127.0.0.1:80
 
+{% if securedrop_app_pow_on_source_interface|default(True) %}
+HiddenServicePoWDefensesEnabled 1
+{% endif %}
+
 {% if securedrop_app_https_on_source_interface|default(False) %}
 HiddenServicePort 443 127.0.0.1:443
 {% endif %}