justsky/tor repository overview

⁠docker-tor

Tor Browser running in a containerised desktop environment, streamed to your browser via Selkies⁠. Built on LinuxServer's baseimage-selkies⁠.

⁠Features

• Full Tor Browser desktop accessible from any web browser
• Hardware-accelerated streaming via Selkies (WebSocket-based, no special firewall rules)
• Works behind Traefik + Pangolin out of the box
• Nvidia GPU passthrough supported

⁠Usage

⁠Docker Compose

services:
  tor:
    image: justsky/tor:latest
    container_name: tor
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - TITLE=Tor Browser
    volumes:
      - /path/to/config:/config
    ports:
      - 3000:3000

⁠Docker Run

docker run -d \
  --name tor \
  --security-opt no-new-privileges:true \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=Etc/UTC \
  -e TITLE="Tor Browser" \
  -v /path/to/config:/config \
  -p 3000:3000 \
  --restart unless-stopped \
  justsky/tor:latest

⁠Environment Variables

See baseimage-selkies⁠ for the full list of Selkies environment variables.

⁠Volumes

⁠Ports

⁠Accessing the UI

Navigate to http://<host>:3000 in your browser. Tor Browser launches automatically on startup.

⁠Behind Pangolin + Traefik

Selkies uses WebSocket-based streaming — no UDP or TURN server configuration required. Add the container as a target resource in Pangolin. Ensure your Traefik entrypoint passes through WebSocket upgrades (default behaviour).

⁠GPU Acceleration (optional)

    environment:
      - DRI_NODE=/dev/dri/renderD128
    devices:
      - /dev/dri:/dev/dri

⁠Building Locally

docker build \
  --build-arg BUILD_DATE=$(date -u +"%Y-%m-%dT%H:%M:%SZ") \
  --build-arg VERSION=local \
  -t docker-tor .

⁠Contributing

See CONTRIBUTING.md⁠.

⁠Security

See SECURITY.md⁠ for vulnerability reporting.

⁠License

GPL-3.0-only⁠