# I2P Anonymous Webserver

## Quick Guide to Anonymous Webserving on I2P

This is your own anonymous I2P webserver ("eepsite"). To serve your own content, simply edit the files in the webserver's root directory and they'll be reachable by others once you follow the instructions below.

The webserver's root directory can be found in the following location:

- `~/.i2p/eepsite/docroot/` (Linux)
- `%APPDATA%\I2P\eepsite\docroot\` (Windows)
- `/Users/(user)/Library/Application Support/i2p` (Mac)

In I2P, hidden services are addressed using a 'key', which is represented as a really long Base64 string. (The 'key' is somewhat analogous to an IP address, and is shown on the Hidden Service Configuration page).

The instructions below detail how to assign a name like "mysite.i2p" to your key and start up your website. You can reach your site locally via http://127.0.0.1:7658/.

## How to set up and announce your hidden service website

Your website is stopped by default. After you start it, it will be difficult for other people to find because it doesn't have a name and they don't have your really long Base64 key. You could just tell people that really long key, but thankfully I2P has an address book and several easy ways to tell people about your website. Here's detailed instructions.

- Pick a name for your website (something.i2p). Use all lower-case. You may wish to check first in your own router's address book here, or the file `i2p/hosts.txt` to see if your name is already taken. Enter the new name for your website on the Hidden Service Configuration page where it says "Website name". This will replace the default "mysite.i2p". Also, check the "Auto Start" box. Your website will now start every time you start your router. Be sure to click "Save".
- Click the start button for your website on the main Hidden Service Manager page. You should now see it listed under "Local Tunnels" on the left side of the I2P Router Console. Your website is now running.
- Highlight the entire "Local destination" key on the Hidden Service Configuration page. and copy it for later pasting. Make sure you get the whole thing - it's over 500 characters.
- Enter the name and paste in the destination key into your master address book. Click "Add" to add the destination to your address book.
- In your browser, enter in your website name (something.i2p) and you should be right back here. Hopefully it worked.
- Before you tell the world about your new website, you should add some content. Go to the following directory and replace the index.html redirect page with your own content:
  - `~/.i2p/eepsite/docroot/` (Linux)
  - `%APPDATA%\I2P\eepsite\docroot\` (Windows)
  - `/Users/(user)/Library/Application Support/i2p` (Mac)

Virtual folders work, so you can host files from a sub directory without explicitly needing to provide a page with links to files. You can change the appearance of the directory listing by supplying an edited jetty-dir.css file for each of the directories you are serving, demonstrated here. The resources sub-directory (containing filetype images for the directory listing) reverts to the default style. If you need a template for a basic site, feel free to borrow and adapt this page and content!

If you're returned to this page after editing the content, try clearing your browser's web cache:

- in Firefox via: Preferences ➜ Advanced ➜ Network ➜ Cached Web Content ➜ Clear Now
- in Chrome/Chromium via: Settings ➜ Advanced Settings ➜ Privacy ➜ Clear browsing data...
- in Opera via: Settings ➜ Privacy ➜ Clear browsing data...

## Register your own .I2P Domain

Now it's time to add your website to an I2P address book hosted by a site such as stats.i2p or no.i2p. That is, you must enter your website name and key into a web interface on one or more of these sites. Here is the key entry form at stats.i2p. Again, your key is the entire "Local destination" key on the Hidden Service Configuration page. Be sure you get the whole thing. Don't forget to click "add a key". Check to see if it reports the key was added. Since many routers periodically get address book updates from these sites, within several hours others will be able to find your website by simply typing something.i2p into their browser.

## Adding Addressbook Subscriptions

Speaking of address book updates, this would be a good time to add some more addressbooks to your own subscription list. Go to your Subscriptions Configuration page and add a couple of these for an automatically updated list of new hosts:

- `http://stats.i2p/cgi-bin/newhosts.txt` (stats.i2p)
- `http://i2host.i2p/cgi-bin/i2hostetag` (i2host.i2p)
- `http://no.i2p/export/alive-hosts.txt` (no.i2p)

If you are in a hurry and can't wait a few hours, you can tell people to use a "jump" address helper redirection service. This will work within a few minutes of your entering the key to an address book on the same site. Test it yourself first by entering `http://stats.i2p/cgi-bin/jump.cgi?a=something.i2p` or `http://i2host.i2p/cgi-bin/i2hostjump?something.i2p` into your browser. Once it's working, you can tell others to use it.

Some people check website lists such as Identiguy's eepsite status list or no.i2p's active host list for new eepsites, so you may start getting a few visitors. But there are plenty of other ways to tell people. Here are a few ideas:

- Post a message on the Eepsite announce forum on forum.i2p.
- Tell people about it on the #i2p or #i2p-chat channels on IRC.
- Put it in a new post on the new Syndie.
- Put it on Ugha Wiki's Eepsite Index

Note that some sites recommend pasting in that really long destination key. You can if you want - but if you have successfully posted your key at an add-key service, tested it using a jump service, and waited 24 hours for the address book update to propagate to others, that shouldn't be necessary.

## Using an alternative webserver to host your site

This site (and the I2P router console) is running on the Jetty webserver, but you may want to use a different webserver to host your content. To maintain anonymity, be sure that your webserver is configured to only allow connections from localhost (127.0.0.1), and check the documentation to ensure your webserver isn't advertising details that may compromise your anonymity.

To configure your webserver for use on I2P, you can either use the existing webserver tunnel and disable the default webserver from running, or create a new HTTP Server tunnel in the Hidden Services Manager. Whatever you choose, you need to make sure the listening port configured for the webserver (7658 by default for the I2P webserver Jetty instance) is also configured in the Hidden Services Webserver settings. So, for example if your webserver is listening by default on address 127.0.0.1 port 80, you'd need to also ensure that the Target port in the Hidden Service Manager settings page for the service is also configured to port 80.

Please be aware that a poorly configured webserver or web appplication can leak potentially compromising information such as your real ip address or server details that may reduce your anonymity or assist a hacker, which is why it's recommended to use the default server until you're up to speed on securing your alternative server and any webapps you may be running, for which there are many guides on the internet. The following may be of help:

- Apache Web Server Hardening & Security Guide
- Nginx Web Server Security & Hardening Guide
- How to Harden Your WordPress Site From Attacks

## Further Assistance

If you have any questions, the following places are available for support:

- Our IRC support channel:
  - #i2p on Freenode
  - Anonymously via your resident I2P IRC tunnel.
- The technical problems section on forum.i2p.
- Ugha Wiki's Eepsite Hosting guide or I2PWiki's Eepsite Hosting guide

Note: This page, the website and the console all need translating into YOUR language if it's not already been done or in progress. Please consider helping the project grow by volunteering your time to translate. Contact the project via the IRC channel listed above. Thanks in advance!

Document last edited: July 2016.