irc.michiganpublic.tech

privacy-first IRC   ngIRCd · TLS-only · Tor v3 hidden service

Connect over TLS

    Server: irc.michiganpublic.tech
    Port:   6697
    TLS:    yes (required)
  

Connect over Tor

Run kubectl -n irc exec deploy/secure-irc-secure-irc-tor -- cat /var/lib/tor/hs/hostname to get the current .onion address; clients should skip TLS verification on that endpoint unless the cert was reissued for it.

What this is

• One-replica ngIRCd with hosts cloaked, DNS off, and minimal logging.
• Cert from cert-manager (letsencrypt-prod), used by both this page and the IRC daemon.
• Tor sidecar publishes a v3 hidden service for the same IRC instance.
• NetworkPolicies pin egress; pod runs non-root, read-only rootfs, dropped caps.

Repository & threat model: see internal_irc.