SecureDrop

SecureDrop is only available via Tor. The administrative user, its password and TOTP can be set as documented in this file and can be modified in the ~/.enough/example.com/inventory/group_vars/securedrop-service-group.yml file.

The service is created on the host specified by the –host argument:

$ enough --domain example.com service create --host website-host securedrop

URLs

The URL of the source and journalist interfaces can be retrieved with:

$ enough --domain example.com ssh securedrop-host cat /var/lib/tor/services/source/hostname /var/lib/tor/services/journalist/hostname

The URL of the journalist interface requires an authentication token and must be copied in the torrc file.