apiVersion: v1
kind: ConfigMap
metadata:
  namespace: {{ deploy.namespace }}
  name: onion-service-{{ deploy.stream }}
data:
  torrc: |
    ## Set DataDirectory
    DataDirectory /var/lib/tor

    ## Do not act as a SOCKS proxy
    SOCKSPort 0

    ## Publish a hidden service
    HiddenServiceDir /var/lib/tor/onion_service/
{% for port, svc in deploy.onion_services.items() %}
    HiddenServicePort {{ port }} {{ svc.host }}:{{ svc.port }}
{% endfor %}
    HiddenServiceNonAnonymousMode 1
    HiddenServiceSingleHopMode 1