SSH Over TOR (Good for any service, also to expose a server behind NAT)

client.sh

#!/bin/bash

sudo apt install -y tor

# get hostname from /var/lib/tor/ssh/hostname on the server
torsocks ssh user@xxxxyyyyzzzzaaaa.onion

server.sh

#!/bin/bash

sudo apt install -y tor
sudo mkdir -p /var/lib/tor/ssh/
sudo chown -R debian-tor:debian-tor /var/lib/tor/ssh/
sudo chmod 700 /var/lib/tor/ssh/

echo "HiddenServiceDir /var/lib/tor/ssh/" | sudo tee -a /etc/tor/torrc
echo "HiddenServicePort 22 127.0.0.1:22" | sudo tee -a /etc/tor/torrc

sudo systemctl restart tor

# sudo cat /var/lib/tor/ssh/hostname -> xxxxyyyyzzzzaaaa.onion

Can also use HiddenServiceAuthorizeClient on the server and HidServAuth on the client (in /etc/tor/torrc) to be more selective about allowed users.

TODO: Check if a windows client can use https://github.com/basil00/TorWall instead of torsocks.