monero-docs/docs/macros/includes/i2pd_template

71 lines
2.8 KiB
Text
Raw Normal View History

!!! success "The end goal"
To enable the following services:
* yourlongb32i2paddress.b32.i2p:18085 - i2p P2P service (for other i2p nodes)
* yourlongb32i2paddress.b32.i2p:18089 - i2p RPC service (for wallets connecting over i2p)
**I2P service for P2P network** is useful for other full node users as it allows them to broadcast transactions over I2P (using `--tx-proxy` option).
**I2P service for wallet interface** is useful for wallet users connecting over I2P because it mitigates Clearnet and Tor exit node MiTM risks (which are very real). By connecting wallet to an I2P service, no MiTM attack is realistic because I2P connections are end-to-end encrypted.
??? question "Why different P2P ports for clearnet and i2p?"
A: The data served by the i2p p2p port differs from clearnet P2P. A different port is required
1. Elevate to root:
``` Bash
sudo su -
```
2. Install i2pd:
``` Bash
apt install apt-transport-https
wget -q -O - https://repo.i2pd.xyz/.help/add_repo | bash -s -
apt update
apt install i2pd
```
3. Create a server tunnel for the Monero P2P and RPC ports:
``` ini
cat << EOF > /etc/i2pd/tunnels.conf.d/monero-mainnet.conf
[monero-node]
type = server
host = 127.0.0.1
# Anonymous inbound port
port = 18085
inport = 0
keys = monero-mainnet.dat
[monero-rpc]
type = server
host = 127.0.0.1
# Restricted RPC port
port = 18089
keys = monero-mainnet.dat
EOF
```
4. Restart i2pd:
``` Bash
systemctl restart i2pd
```
5. Find the new b32 address of the node:
=== "Terminal"
``` Bash
curl -s http://127.0.0.1:7070/?page=i2p_tunnels | grep -Eo "[a-zA-Z0-9./?=_%:-]*" | grep "18085"`
```
=== "Web console"
Go to the web console at 127.0.0.1:7070 -> [I2P tunnels page](http://127.0.0.1:7070/?page=i2p_tunnels).
Look for Server tunnels and you will see an address like **_`yourlongb32i2paddress.b32.i2p`_** next to **`monero-node`**.
6. Copy the result into your Monero [**config file** :link:{ title="Monerod Config" }]{{ config }}, enabling these options:
``` ini
anonymous-inbound=yourlongb32i2paddress.b32.i2p,127.0.0.1:18085
tx-proxy=i2p,127.0.0.1:4447,disable_noise
```
Replace `yourlongb32i2paddress.b32.i2p` with your b32 address.
7. The node is now available on i2p. You can check that the service is working by using curl:
``` Bash
curl -x socks5h://127.0.0.1:4447 http://yourlongb32i2paddress.b32.i2p:18089/get_info
```
!!! note "(Optional) Register short and memorable .i2p domain on [reg.i2p](http://reg.i2p)"