add instructions for tor setup on all systems and for firefox

source/_static/default.css

@@ -64,9 +64,14 @@ h1, h2 {
     margin-top: 1rem;
 }
 
+.bd-sidebar {
+    background: none;
+}
+
 @media (min-width: 768px) {
     .bd-sidebar {
         border-right: 1px solid #f8f8ff;
+        background: none;
     }
 }
 
@@ -164,3 +169,11 @@ nav.bd-links .fa-chevron-up:hover, nav.bd-links .fa-chevron-down:hover {
 nav.bd-links > ul.nav {
   padding-right: 8px;
 }
+
+.highlight > pre {
+  background-color: lightgray;
+}
+
+#main-content.row {
+    margin-top: 6rem!important;
+}

source/index.rst

@@ -20,6 +20,7 @@ Here you will find guidance and information about the Start9 Embassy personal se
 
   user-manuals/embassyos/index
   user-manuals/available-services/index
+  user-manuals/tor/index
 
 .. toctree::
   :maxdepth: 2

source/user-manuals/tor/android.rst

@@ -0,0 +1,70 @@
+.. _tor-android:
+
+*************************
+Setting up Tor on Android
+*************************
+
+.. warning::
+    Custom proxies are now only available in Firefox `Beta <https://play.google.com/store/apps/details?id=org.mozilla.firefox_beta&hl=en_US&gl=US>`_ or `Nightly <https://play.google.com/store/apps/details?id=org.mozilla.fenix&hl=en_US&gl=US>`_ due to a breaking change by the Firefox team.
+
+First, install the Tor proxy service to your system. To do so, open the play store and download `Orbot <https://play.google.com/store/apps/details?id=org.torproject.android>`_. Once you have done so, launch Orbot.
+
+Next, open the kebab menu in the upper right hand corner and select `Settings`:
+
+.. figure:: /_static/images/tor/orbot_menu.png
+  :width: 80%
+  :alt: Orbot menu
+
+Then, make sure the options for `Start Orbot on Boot` and `Allow Background Starts` are checked:
+
+.. figure:: /_static/images/tor/orbot_settings.png
+  :width: 80%
+  :alt: Orbot settings
+
+Go back, and tap start:
+
+.. figure:: /_static/images/tor/orbot_start.png
+  :width: 80%
+  :alt: Orbot start
+
+Orbot will start up the Tor service. Once complete, you will see:
+
+.. figure:: /_static/images/tor/orbot_started.png
+  :width: 80%
+  :alt: Orbot started
+
+You can now close Orbot.
+
+Setting up Orbot VPN mode
+-------------------------
+
+Orbot's VPN mode allows certain applications to utilize it's Tor service.
+
+This process also applies for GrapheneOS.
+
+To setup, first disable Private DNS on your device. To do so, navigate to: :code:`Settings > Network & Internet > Advanced > Private DNS > Off`
+
+.. figure:: /_static/images/tor/private_dns_off.png
+  :width: 80%
+  :alt: Private DNS off
+  
+  Toggle Private DNS to "off"
+
+Next, launch Orbot and toggle VPN Mode on while on the main screen:
+
+.. figure:: /_static/images/tor/orbot_vpn.png
+  :width: 80%
+  :alt: Orbot vpn mode
+  
+  Toggle VPN Mode to "on"
+
+Under `Tor-Enabled Apps`, select the gear to add applications that need to be proxied through VPN mode to utilize Tor. 
+
+.. figure:: /_static/images/tor/orbot_apps.png
+  :width: 80%
+  :alt: Orbot apps
+  
+Examples of applications that need this feature are:
+
+- Bitwarden
+- Zap

source/user-manuals/tor/firefox/android.rst

@@ -0,0 +1,42 @@
+.. _firefox-tor-android:
+
+**************************************
+Setting up Firefox with Tor on Android
+**************************************
+
+.. warning::
+  This guide assumes you have completed :ref:`setting up Tor for Android<tor-android>`. Please visit this section first before you proceed as it is required for Firefox to properly work with Tor.
+
+Once Tor is setup on your system, you can proceed to setup Firefox.
+
+Download `Firefox Beta <https://play.google.com/store/apps/details?id=org.mozilla.firefox_beta>`_ from the Play Store, or Fennec for F-Droid.
+
+Now, you need to download a `Proxy Auto Config` file that will use Orbot to resolve :code:`.onion` URLs. We have one hosted `here <https://registry.start9labs.com/sys/proxy.pac>`_.
+
+Next, navigate to :code:`about:config` in the Firefox URL bar, like so:
+
+.. figure:: /_static/images/tor/about_config.png
+  :width: 80%
+  :alt: Firefox about config
+
+You are going to have to change a few options in here. First, type ``“network.proxy.type”`` into the search bar, and set the value to ``"2"``:
+
+.. figure:: /_static/images/tor/network_proxy_type.png
+  :width: 80%
+  :alt: Firefox network proxy type setting screenshot
+
+Then, search for ``“network.proxy.autoconfig_url”``, and set the value to ``"file:///storage/emulated/0/Download/proxy.pac"``:
+
+.. figure:: /_static/images/tor/autoconfig_url.png
+  :width: 80%
+  :alt: Firefox autoconfig url setting screenshot
+
+Next, search for ``“network.proxy.socks_remote_dns”``, and set the value to ``"true"``:
+
+.. figure:: /_static/images/tor/socks_remote_dns.png
+  :width: 80%
+  :alt: Firefox socks remote dns setting screenshot
+
+Finally, search for ``“dom.securecontext.whitelist_onions”``, and set the value to ``"true"``:
+
+Restart Firefox, and you’re all set! You should now be able to navigate to :code:`.onion` URLs in Firefox. This means you can bookmark Cups Messenger, and use your Bitwarden Tor address in the `Bitwarden Password Manager <https://play.google.com/store/apps/details?id=com.x8bit.bitwarden&hl=en_US&gl=US>`_ native application.

source/user-manuals/tor/firefox/index.rst

@@ -0,0 +1,22 @@
+*****************
+Firefox Tor Setup
+*****************
+
+.. warning::
+  These guides assume you have completed :ref:`setting up Tor for your operating system<tor-system-setup>`. Please visit this section first before you proceed as it is required for Firefox to properly work with Tor.
+
+After completing the steps above to setup Tor on your operating system:
+
+#. Go to :code:`about:config` in the URL bar.
+#. Accept any warnings that may appear about accessing advanced settings.
+#. Search for :code:`dom.securecontext.whitelist_onions` and set the value to :code:`true`.
+#. Restart Firefox.
+#. Select your platform below to complete setup:
+
+.. toctree::
+  :maxdepth: 1
+
+  Android <android>
+  Mac <mac>
+  Linux <linux>
+  Windows <windows>

source/user-manuals/tor/firefox/linux.rst

@@ -0,0 +1,46 @@
+.. _firefox-tor-linux:
+
+************************************
+Setting up Firefox with Tor on Linux
+************************************
+
+.. warning::
+  This guide assumes you have completed :ref:`setting up Tor for Linux<tor-linux>`. Please visit this section first before you proceed as it is required for Firefox to properly work with Tor.
+
+Once Tor is setup on your system, you can proceed to setup Firefox.
+
+Next, in order to tell Firefox which urls to use Tor for, you need a `Proxy Auto Config` file. We have one hosted `here <https://registry.start9labs.com/sys/proxy.pac>`_. To get it, you can run:
+
+.. code-block::
+
+  sudo wget -P /etc/tor https://registry.start9labs.com/sys/proxy.pac
+
+Now open your Firefox web browser, and select preferences:
+
+.. figure:: /_static/images/tor/firefox_preferences.png
+  :width: 80%
+  :alt: Firefox preferences screenshot
+
+  Select :menuselection:`Settings --> Preferences`
+
+Search for the term “proxy” in the search bar in the upper right, then select the button that says `Settings…`:
+
+.. figure:: /_static/images/tor/firefox_search.png
+  :width: 80%
+  :alt: Firefox search screenshot
+
+This should open a menu that will allow you to configure your proxy settings. Select `Automatic proxy configuration URL` and paste in:
+
+.. code-block::
+
+  file:///etc/tor/proxy.pac
+
+Then, check the box labeled `Proxy DNS when using SOCKS v5`:
+
+.. figure:: /_static/images/tor/firefox_proxy.png
+  :width: 80%
+  :alt: Firefox proxy settings screenshot
+
+Click :code:`OK` and then restart Firefox for the changes to take effect.
+
+Now you’re all set! You should now be able to navigate to :code:`.onion` URLs in Firefox. This means you can bookmark Cups Messenger, and use your Bitwarden Tor address in the `Bitwarden Firefox Plugin <https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/>`_.

source/user-manuals/tor/firefox/mac.rst

@@ -0,0 +1,51 @@
+.. _firefox-tor-mac:
+
+************************************
+Setting up Firefox with Tor on MacOS
+************************************
+
+.. warning::
+  This guide assumes you have completed :ref:`setting up Tor for MacOS<tor-mac>`. Please visit this section first before you proceed as it is required for Firefox to properly work with Tor.
+
+Once Tor is setup on your system, you can proceed to setup Firefox.
+
+In order to tell Firefox which URLs to use Tor for, you need a `Proxy Auto Config` file. We have one hosted `here <https://registry.start9labs.com/sys/proxy.pac>`_. To get it, run:
+
+.. code-block::
+
+  brew install wget
+
+And then:
+
+.. code-block::
+
+  wget -P /usr/local/etc/tor https://registry.start9labs.com/sys/proxy.pac
+
+Now open your Firefox web browser, and select preferences:
+
+.. figure:: /_static/images/tor/firefox_preferences.png
+  :width: 80%
+  :alt: Firefox preferences screenshot
+
+  Select :menuselection:`Settings --> Preferences`
+
+Search for the term “proxy” in the search bar in the upper right, then select the button that says `Settings…`:
+
+.. figure:: /_static/images/tor/firefox_search.png
+  :width: 80%
+  :alt: Firefox search screenshot
+
+This should open a menu that will allow you to configure your proxy settings. Select `Automatic proxy configuration URL` and paste in:
+
+.. code-block::
+  file:///usr/local/etc/tor/proxy.pac
+
+Then, check the box labeled `Proxy DNS when using SOCKS v5`:
+
+.. figure:: /_static/images/tor/firefox_proxy.png
+  :width: 80%
+  :alt: Firefox proxy settings screenshot
+
+Click :code:`OK` and then restart Firefox for the changes to take effect.
+
+Now you’re all set! You should now be able to navigate to :code:`.onion` URLs in Firefox. This means you can bookmark Cups Messenger, and use your Bitwarden Tor address in the `Bitwarden Firefox Plugin <https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/>`_.

source/user-manuals/tor/firefox/windows.rst

@@ -0,0 +1,46 @@
+.. _firefox-tor-windows:
+
+**************************************
+Setting up Firefox with Tor on Windows
+**************************************
+
+.. warning::
+  This guide assumes you have completed :ref:`setting up Tor for Windows<tor-windows>`. Please visit this section first before you proceed as it is required for Firefox to properly work with Tor.
+
+Once Tor is setup on your system, you can proceed to setup Firefox.
+
+Now, you need to download a `Proxy Auto Config` file that will use the Tor service to resolve .onion urls. We have one hosted `here <https://registry.start9labs.com/sys/proxy.pac>`_. Save it somewhere you won’t delete it. For this example:
+
+.. code-block::
+
+  C:\Program Files\Tor Browser\proxy.pac
+
+Now open your Firefox web browser, and select options:
+
+.. figure:: /_static/images/tor/firefox_options_windows.png
+  :width: 80%
+  :alt: Firefox options screenshot
+
+  Select :menuselection:`Settings --> Options`
+
+Search for the term “proxy” in the search bar in the upper right, then select the button that says `Settings…`:
+
+.. figure:: /_static/images/tor/firefox_search.png
+  :width: 80%
+  :alt: Firefox search screenshot
+
+This should open a menu that will allow you to configure your proxy settings. Select `Automatic proxy configuration URL` and paste in the path to your PAC file from earlier, prefixed with ``"file://"``. For example:
+
+.. code-block::
+
+  file://C:/Program Files/Tor Browser/proxy.pac
+
+Then, check the box labeled `Proxy DNS when using SOCKS v5`:
+
+.. figure:: /_static/images/tor/firefox_proxy.png
+  :width: 80%
+  :alt: Firefox proxy settings screenshot
+
+Click :code:`OK` and then restart Firefox for the changes to take effect.
+
+Now you’re all set! You should now be able to navigate to :code:`.onion` URLs in Firefox. This means you can bookmark Cups Messenger, and use your Bitwarden Tor address in the `Bitwarden Firefox Plugin <https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/>`_.

source/user-manuals/tor/index.rst

@@ -0,0 +1,62 @@
+.. _tor-system-setup:
+
+**************
+Setting up Tor
+**************
+
+Operating Systems
+=================
+
+Setting up Tor on your operating system enables other applications to utilize its functionality beyond Tor Browser. For example, a bitcoin wallet software that connects to a remote bitcoin node over Tor, or Firefox web browser. In the following guides, we will walk you through setting up Tor globally. That way, you can integrate other applications that use Embassy services all over Tor!
+
+Select your operating system to get started:
+
+.. toctree::
+  :maxdepth: 1
+
+  MacOS<mac>
+  Windows<windows>
+  Linux<linux>
+  Android<android>
+
+.. _tor-browser-setup:
+
+Browsers
+========
+
+To access websites that provide a Tor address (the :code:`.onion` URL), a Tor enabled browser is required. 
+
+Tor Browser
+-----------
+
+The `Tor Browser <https://torproject.org/download/>`_ works right out of the box. Simply download, launch, and plug in a :code:`.onion` URL to access a website over Tor. No extra configuration is needed. However, it is important to note that this is the least flexible option - browser extensions are not enabled, so utilizing password managers such as Bitwarden is not possible. It is also the slowest experience for ordinary web browsing due to the extra hops it makes across the internet.
+
+Brave Browser
+-------------
+
+Alternatively, you can use `Brave <https://brave.com/>`_ to access websites over Tor. After downloading and launching, you can open a Brave Private Window with Tor by pressing :code`Option ⌥ + Command ⌘ + N`.
+However, this approach is also restricting, since browser extensions are disabled in this mode as well. Ordinary web browsing is also somewhat slower in a Private Window with Tor, so you might choose to navigate between Brave browser windows for either clearnet or Tor websites. This is a somewhat less uniform experience. 
+
+Firefox Browser
+---------------
+
+Start9 recommends configuring Firefox to resolve Tor addresses. This is by far the most featureful and flexible approach. It requires a bit more work (< 5 minutes), but the resulting experience is worth the effort. It gives you the best of both worlds: you can browse clearnet websites without latency and visit Onion websites without switching browsers. And for Embassy owners, there is the added benefit of using your `Bitwarden password manager <https://medium.com/@start9labs/start9-welcomes-bitwarden-to-the-sovereign-app-store-8ad31e1a3070>`_!
+
+After completing the steps above to setup Tor on your operating system:
+
+#. Go to :code:`about:config` in the URL bar.
+#. Accept any warnings that may appear about accessing advanced settings.
+#. Search for :code:`dom.securecontext.whitelist_onions` and set the value to :code:`true`.
+#. Restart Firefox.
+#. Select your platform below to complete setup:
+
+- :ref:`Android <firefox-tor-android>`
+- :ref:`Linux <firefox-tor-linux>`
+- :ref:`Mac <firefox-tor-mac>`
+- :ref:`Windows <firefox-tor-windows>`
+
+.. toctree::
+  :maxdepth: 1
+  :hidden:
+
+  Firefox <firefox/index>

source/user-manuals/tor/linux.rst

@@ -0,0 +1,13 @@
+.. _tor-linux:
+
+***********************
+Setting up Tor on Linux
+***********************
+
+All you need to do is install the Tor proxy service to your system. To do so, open your terminal and run the following command:
+
+.. code-block::
+
+    sudo apt update && sudo apt install tor
+
+That's it! Your Linux machine is now setup to natively use Tor.

source/user-manuals/tor/mac.rst

@@ -0,0 +1,39 @@
+.. _tor-mac:
+
+***********************
+Setting up Tor on MacOS
+***********************
+
+First, you need to install the Tor proxy service to your system. This will require opening your Terminal. 
+
+To open your terminal, hold the command key ⌘ + spacebar. `Spotlight Search` will appear. Start typing "terminal" and select the program called `Terminal`.
+
+
+Paste in the following commands and hit <Enter>.
+
+.. code-block::
+
+    which brew || /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install.sh)"
+    brew install tor
+    brew services start tor
+
+When this completes, you should see something like:
+
+.. code-block::
+
+    ==> Successfully started `tor` (label: homebrew.mxcl.tor)
+
+If you notice issues connecting to Tor websites, try restarting the Tor service. Open the terminal and run:
+
+.. code-block::
+    brew services restart tor
+
+After running this command, you should see something like:
+
+.. code-block::
+
+    Stopping `tor`... (might take a while)
+    ==> Successfully stopped `tor` (label: homebrew.mxcl.tor)
+    ==> Successfully started `tor` (label: homebrew.mxcl.tor)
+
+That's it! Your Mac is now setup to natively use Tor.

source/user-manuals/tor/windows.rst

@@ -0,0 +1,42 @@
+.. _tor-windows:
+
+*************************
+Setting up Tor on Windows
+*************************
+
+First, you need to install the Tor proxy service to your system. Unfortunately, `torproject.org` no longer publishes a standalone Tor binary for Windows, so the recommended way to get it is with the Tor Browser Bundle. You can download it `here <https://www.torproject.org/download/>`_.
+
+.. figure:: /_static/images/tor/tor_download_windows.png
+  :width: 80%
+  :alt: Tor download
+
+  Download Tor for Windows
+
+Once it is downloaded, go ahead and run the installer. If you want to install the program outside of your user directory, you will have to right click and select `Run as Administrator`. Once you have selected a language, you should see a menu like this:
+
+.. figure:: /_static/images/tor/tor_windows_install.png
+  :width: 80%
+  :alt: Tor install wizard
+
+  Note Tor destination folder when installing
+
+It does not matter where you set the destination folder, however you need to make note of it for later. Go ahead and finish the installation.
+
+Now you want to set up Tor to run as a service: to run in the background and keep itself running so you don’t have to worry about it again. To do so, you need to open your Command Prompt as an administrator.
+In Windows 10, you can simply type :code:`cmd` in the Windows search bar, right click on the first result, and select `Run as Administrator`.
+Once it opens, you can run the following commands, inserting your destination folder in place of :code:`<PATH TO>`:
+
+.. code-block::
+
+    sc create tor start=auto binPath="<PATH TO>\Tor Browser\Browser\TorBrowser\Tor\tor.exe -nt-service"
+    sc start tor
+
+When you run this, it should look something like this:
+
+.. figure:: /_static/images/tor/tor_windows_terminal.png
+  :width: 80%
+  :alt: Tor windows terminal
+
+  Replace highlighted section with noted destination folder
+
+That's it! Your Windows computer is now setup to natively use Tor.