# ~/.bitmonero/bitmonero.conf

# Private Monero Node over Tor Only

# Data directory
#data-dir=~/.bitmonero

# Disable automatic update checks
check-updates=disabled

# Optional: recent ban list for malicious nodes
#ban-list=ban_list.txt

# Logging
log-file=~/.bitmonero/bitmonero.log
log-level=0

# ======================
# === P2P Connection ===
# ======================
# Listen only on localhost for P2P connections
p2p-bind-ip=127.0.0.1        # STEALTH MODE
#p2p-bind-port=18080         # Optional: you can keep the default
p2p-use-ipv6=0               # Disable IPv6, not needed in your case
#p2p-bind-ipv6-address=::1   # Only if using IPv6 localhost
#no-igd=1                    # Disable UPnP port mapping
proxy=127.0.0.1:9050         # Use Tor SOCKS proxy
hide-my-port=1               # Do not announce P2P port

# Allow ZERO incoming P2P connections
in-peers=0

# Bandwidth limits (adjust as needed)
out-peers=10

# Bandwidth limits (adjust as needed)
limit-rate-up=1048576
limit-rate-down=1048576
rpc-login=Myuser:Mypass
# =========================
# === RPC Configuration ===
# =========================
# Restrict RPC to localhost only
rpc-restricted-bind-ip=127.0.0.1        # STEALTH MODE
rpc-restricted-bind-ipv6-address=::1    # Optional, only if using IPv6
rpc-restricted-bind-port=18089

# Optional RPC authentication (recommended for additional security)
# rpc-login=username:password

# Use autodetect for RPC SSL
rpc-ssl=autodetect

# ===================
# === ZMQ Settings ==
# ===================
zmq-pub=tcp://127.0.0.1:18083

# =============================
# === Transaction over Tor ====
# =============================
tx-proxy=tor,127.0.0.1:9050,16,disable_noise

# ================================
# === Tor P2P (if you want it) ===
# ================================
# Optional: You can leave this out if you don't want to accept incoming connections
#anonymous-inbound=YourLongV3OnionAddress.onion:18084,127.0.0.1:18084

# But you likely want to **omit** this for full privacy, unless you plan to connect to your own node via onion service.

# =============================
# === Additional Protections ==
# =============================
disable-rpc-ban=1  # Be forgiving to connecting wallets (you are the only one connecting)

#anonymous-inbound=Link.onion:18084,127.0.0.1:18084 # Tor-p2p