add tor onion addresses back in

28 files changed, 136 insertions, 23 deletions

diff --git a/linux/nginx/etc/nginx/conf.d/ao.conf b/linux/nginx/etc/nginx/conf.d/ao.conf
index a18fac4..e609a84 100644
--- a/linux/nginx/etc/nginx/conf.d/ao.conf
+++ b/linux/nginx/etc/nginx/conf.d/ao.conf
@@ -3,6 +3,7 @@ server {
 	listen 443 ssl;
 	http2 on;
 	server_name ao.cleberg.net;
+	add_header Onion-Location "http://7lyqrn4ofxdq7lfporviu44zpc42wooh2bqazfhvpscgwby2vcwldzad.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/art.conf b/linux/nginx/etc/nginx/conf.d/art.conf
index 1ffe9e2..931a639 100644
--- a/linux/nginx/etc/nginx/conf.d/art.conf
+++ b/linux/nginx/etc/nginx/conf.d/art.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name art.cleberg.net;
+	server_name art.cleberg.net  mplqs2jxkjd5wxak3zjv55oxyadf4vwzx6ksgj4ztftndjl6elgsf4qd.onion;
+	add_header Onion-Location "http://mplqs2jxkjd5wxak3zjv55oxyadf4vwzx6ksgj4ztftndjl6elgsf4qd.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/br.conf b/linux/nginx/etc/nginx/conf.d/br.conf
index 5c60087..4451fe6 100644
--- a/linux/nginx/etc/nginx/conf.d/br.conf
+++ b/linux/nginx/etc/nginx/conf.d/br.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name br.cleberg.net;
+	server_name br.cleberg.net  pkft6saqbmn6he5g626fphvlijmkdf4rzckjw6r57zsmuqm4ukd6i5ad.onion;
+	add_header Onion-Location "http://pkft6saqbmn6he5g626fphvlijmkdf4rzckjw6r57zsmuqm4ukd6i5ad.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/bw.conf b/linux/nginx/etc/nginx/conf.d/bw.conf
index b903d8e..e3612d4 100644
--- a/linux/nginx/etc/nginx/conf.d/bw.conf
+++ b/linux/nginx/etc/nginx/conf.d/bw.conf
@@ -2,7 +2,8 @@ server {
     listen [::]:443 ssl;
     listen 443 ssl;
     http2 on;
-    server_name bw.cleberg.net;
+    server_name bw.cleberg.net  z7kc27ceokwgddrcspxx4eb7b6xqmtjj26nohg3wgt6hsnnlfmk4apqd.onion;
+	add_header Onion-Location "http://z7kc27ceokwgddrcspxx4eb7b6xqmtjj26nohg3wgt6hsnnlfmk4apqd.onion$request_uri" always;
     include custom.d/tls/ssl_engine.conf;
     include custom.d/tls/certificate_files.conf;
     include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/cc.conf b/linux/nginx/etc/nginx/conf.d/cc.conf
index 753cf6c..42c8f83 100644
--- a/linux/nginx/etc/nginx/conf.d/cc.conf
+++ b/linux/nginx/etc/nginx/conf.d/cc.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name cc.cleberg.net;
+	server_name cc.cleberg.net  gipsohqqcehn4n6smyg5j5aap7ln6lwugyjm2lxyx4vfiwayjhpnodyd.onion;
+	add_header Onion-Location "http://gipsohqqcehn4n6smyg5j5aap7ln6lwugyjm2lxyx4vfiwayjhpnodyd.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/cleberg.net.conf b/linux/nginx/etc/nginx/conf.d/cleberg.net.conf
index b8e6706..27848fa 100644
--- a/linux/nginx/etc/nginx/conf.d/cleberg.net.conf
+++ b/linux/nginx/etc/nginx/conf.d/cleberg.net.conf
@@ -20,6 +20,8 @@ server {
 	include custom.d/basic.conf;
 	root /var/www/cleberg.net/;
 
+	add_header Onion-Location "http://paske4urhs6nttrtlkuwa5cowum3fjkc6yv6kl4ncx3mjxcd77764nqd.onion$request_uri" always;
+
 	location /org/ {
 		internal;
 		alias /var/www/cleberg.net/org/;
@@ -56,3 +58,37 @@ server {
 	return 301 https://cleberg.net$request_uri;
 }
 
+server {
+    listen 127.0.0.1:8090;
+    server_name paske4urhs6nttrtlkuwa5cowum3fjkc6yv6kl4ncx3mjxcd77764nqd.onion;
+    include custom.d/basic.conf;
+    root /var/www/cleberg.net/;
+
+    location /org/ {
+        internal;
+        alias /var/www/cleberg.net/org/;
+        default_type text/plain;
+        add_header Content-Type "text/plain; charset=utf-8";
+    }
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+
+    location /blog/ {
+        rewrite ^/blog/((?!index)[^/]+)/(.*)$ /blog/$1.html permanent;
+        if ($http_accept ~* "text/markdown") {
+            rewrite ^/blog/([^/]+)\.html$ /org/blog/$1.org last;
+        }
+    }
+
+    location ~ ^/([^/]+)\.html$ {
+        if ($http_accept ~* "text/markdown") {
+            rewrite ^/([^/]+)\.html$ /org/$1.org last;
+        }
+        try_files $uri =404;
+    }
+
+    location /atom.xml { return 301 $scheme://$host/feed.xml; }
+    location /blog/salary-transparency.html { return 301 $scheme://$host/salary/; }
+}
diff --git a/linux/nginx/etc/nginx/conf.d/cv.conf b/linux/nginx/etc/nginx/conf.d/cv.conf
index 1ad3771..21bf4c5 100644
--- a/linux/nginx/etc/nginx/conf.d/cv.conf
+++ b/linux/nginx/etc/nginx/conf.d/cv.conf
@@ -3,6 +3,7 @@ server {
 	listen 443 ssl;
 	http2 on;
 	server_name cv.cleberg.net;
+	add_header Onion-Location "http://xe43aewwiybmbo5qsstx7t5kmgkd2ei4bkkvqinwd7fxfmkekvnjbbad.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
@@ -11,3 +12,12 @@ server {
 	autoindex on;
 	location / { try_files $uri $uri/ /index.html; }
 }
+
+server {
+    listen 127.0.0.1:8081;
+    server_name xe43aewwiybmbo5qsstx7t5kmgkd2ei4bkkvqinwd7fxfmkekvnjbbad.onion;
+    include custom.d/basic.conf;
+    root /var/www/cv/;
+    autoindex on;
+    location / { try_files $uri $uri/ /index.html; }
+}
diff --git a/linux/nginx/etc/nginx/conf.d/files.conf b/linux/nginx/etc/nginx/conf.d/files.conf
index 090a51a..f43c642 100644
--- a/linux/nginx/etc/nginx/conf.d/files.conf
+++ b/linux/nginx/etc/nginx/conf.d/files.conf
@@ -3,6 +3,7 @@ server {
 	listen 443 ssl;
 	http2 on;
 	server_name files.cleberg.net;
+	add_header Onion-Location "http://yt2y635dc6zyxziy5ytkfz36bmkgcxuccq3meom6qp44gjdat54wt5id.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
@@ -11,3 +12,12 @@ server {
 	autoindex on;
 	location / { try_files $uri $uri/ /index.html; }
 }
+
+server {
+    listen 127.0.0.1:8082;
+    server_name yt2y635dc6zyxziy5ytkfz36bmkgcxuccq3meom6qp44gjdat54wt5id.onion;
+    include custom.d/basic.conf;
+    root /var/www/files/;
+    autoindex on;
+    location / { try_files $uri $uri/ /index.html; }
+}
diff --git a/linux/nginx/etc/nginx/conf.d/hat.conf b/linux/nginx/etc/nginx/conf.d/hat.conf
index 8fcc1e7..91cab45 100644
--- a/linux/nginx/etc/nginx/conf.d/hat.conf
+++ b/linux/nginx/etc/nginx/conf.d/hat.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name hat.cleberg.net;
+	server_name hat.cleberg.net  jfrkztgin2ngoj2fnssc2m2j2ycpchmrhzhudaucgvaib5iqwgfxexyd.onion;
+	add_header Onion-Location "http://jfrkztgin2ngoj2fnssc2m2j2ycpchmrhzhudaucgvaib5iqwgfxexyd.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/hn.conf b/linux/nginx/etc/nginx/conf.d/hn.conf
index a68e45f..d9cab33 100644
--- a/linux/nginx/etc/nginx/conf.d/hn.conf
+++ b/linux/nginx/etc/nginx/conf.d/hn.conf
@@ -2,10 +2,11 @@ server {
     listen [::]:443 ssl;
     listen 443 ssl;
     http2 on;
+    listen 127.0.0.1:8093;
     server_name hn.cleberg.net r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion;
     root /var/www/hn/output/;
     autoindex on;
-    add_header Onion-Location http://r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion;
+    add_header Onion-Location "http://r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion$request_uri" always;
     include custom.d/tls/ssl_engine.conf;
     include custom.d/tls/certificate_files.conf;
     include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/img.conf b/linux/nginx/etc/nginx/conf.d/img.conf
index 51a7fa0..acbf363 100644
--- a/linux/nginx/etc/nginx/conf.d/img.conf
+++ b/linux/nginx/etc/nginx/conf.d/img.conf
@@ -3,6 +3,7 @@ server {
 	listen 443 ssl;
 	http2 on;
 	server_name img.cleberg.net;
+	add_header Onion-Location "http://ltf2dfg7tj263ll24lxuq7igejcrhcazjp6whgg6u6vyjir2iahqggad.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
@@ -11,3 +12,12 @@ server {
 	autoindex on;
 	location / { try_files $uri $uri/ =404; }
 }
+
+server {
+    listen 127.0.0.1:8083;
+    server_name ltf2dfg7tj263ll24lxuq7igejcrhcazjp6whgg6u6vyjir2iahqggad.onion;
+    include custom.d/basic.conf;
+    root /var/www/img/;
+    autoindex on;
+    location / { try_files $uri $uri/ =404; }
+}
diff --git a/linux/nginx/etc/nginx/conf.d/ld.conf b/linux/nginx/etc/nginx/conf.d/ld.conf
index 0786de2..47ec315 100644
--- a/linux/nginx/etc/nginx/conf.d/ld.conf
+++ b/linux/nginx/etc/nginx/conf.d/ld.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name ld.cleberg.net;
+	server_name ld.cleberg.net  u3tyzuhs7o4hkizpbcxbm5yqzj74bjqb3phfqfszrx4u75dua7lpf7ad.onion;
+	add_header Onion-Location "http://u3tyzuhs7o4hkizpbcxbm5yqzj74bjqb3phfqfszrx4u75dua7lpf7ad.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/lt.conf b/linux/nginx/etc/nginx/conf.d/lt.conf
index 39b1a99..1ee1d2e 100644
--- a/linux/nginx/etc/nginx/conf.d/lt.conf
+++ b/linux/nginx/etc/nginx/conf.d/lt.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name lt.cleberg.net;
+	server_name lt.cleberg.net  nxw6545qeepw2s2kngowsxbcizjcxyimn7dq2bpvr3sqabsu2juj6gyd.onion;
+	add_header Onion-Location "http://nxw6545qeepw2s2kngowsxbcizjcxyimn7dq2bpvr3sqabsu2juj6gyd.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/mz.conf b/linux/nginx/etc/nginx/conf.d/mz.conf
index 4a06e46..91e744d 100644
--- a/linux/nginx/etc/nginx/conf.d/mz.conf
+++ b/linux/nginx/etc/nginx/conf.d/mz.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name mz.cleberg.net;
+	server_name mz.cleberg.net  ltawlmsk6vhrig2awwshnduiv45anelx3thepkd6xh4n2s4jxu7wyrid.onion;
+	add_header Onion-Location "http://ltawlmsk6vhrig2awwshnduiv45anelx3thepkd6xh4n2s4jxu7wyrid.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/office.conf b/linux/nginx/etc/nginx/conf.d/office.conf
index 0ac26f2..2d2a32a 100644
--- a/linux/nginx/etc/nginx/conf.d/office.conf
+++ b/linux/nginx/etc/nginx/conf.d/office.conf
@@ -3,10 +3,18 @@ server {
 	listen 443 ssl;
 	http2 on;
 	server_name office.cleberg.net;
+	add_header Onion-Location "http://uwtjz6pof52bzdkj242mub77ls2ji3qiznbsuoir235rxynqxadpghid.onion$request_uri" always;
 	root /var/www/office/;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
 	include custom.d/basic.conf;
 	location / { try_files $uri $uri/ /index.html; }
-}
\ No newline at end of file
+}
+server {
+    listen 127.0.0.1:8088;
+    server_name uwtjz6pof52bzdkj242mub77ls2ji3qiznbsuoir235rxynqxadpghid.onion;
+    include custom.d/basic.conf;
+    root /var/www/office/;
+    location / { try_files $uri $uri/ /index.html; }
+}
diff --git a/linux/nginx/etc/nginx/conf.d/org.conf b/linux/nginx/etc/nginx/conf.d/org.conf
index 61302d1..d85ae45 100644
--- a/linux/nginx/etc/nginx/conf.d/org.conf
+++ b/linux/nginx/etc/nginx/conf.d/org.conf
@@ -3,10 +3,18 @@ server {
 	listen 443 ssl;
 	http2 on;
 	server_name org.cleberg.net;
+	add_header Onion-Location "http://7vsifofpucgi3wva52nbwhwglrmbyxgdapbkkmgniqlsskspux5zocyd.onion$request_uri" always;
 	root /var/www/org/;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
 	include custom.d/basic.conf;
 	location / { try_files $uri $uri/ /index.html; }
-}
\ No newline at end of file
+}
+server {
+    listen 127.0.0.1:8085;
+    server_name 7vsifofpucgi3wva52nbwhwglrmbyxgdapbkkmgniqlsskspux5zocyd.onion;
+    include custom.d/basic.conf;
+    root /var/www/org/;
+    location / { try_files $uri $uri/ /index.html; }
+}
diff --git a/linux/nginx/etc/nginx/conf.d/paste.conf b/linux/nginx/etc/nginx/conf.d/paste.conf
index 0cb16a2..1b7b01a 100644
--- a/linux/nginx/etc/nginx/conf.d/paste.conf
+++ b/linux/nginx/etc/nginx/conf.d/paste.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name paste.cleberg.net;
+	server_name paste.cleberg.net  ciserod7fbncypo762qcqtowldl3qjhlojfnmguiuvcj3rcyrhqs6ead.onion;
+	add_header Onion-Location "http://ciserod7fbncypo762qcqtowldl3qjhlojfnmguiuvcj3rcyrhqs6ead.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/pin.conf b/linux/nginx/etc/nginx/conf.d/pin.conf
index 1b0b9c7..0fb3449 100644
--- a/linux/nginx/etc/nginx/conf.d/pin.conf
+++ b/linux/nginx/etc/nginx/conf.d/pin.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name pin.cleberg.net;
+	server_name pin.cleberg.net  3rtmxu6slammicquf5cpgiptjpzht3n342vh62utoyxchds5r76tadad.onion;
+	add_header Onion-Location "http://3rtmxu6slammicquf5cpgiptjpzht3n342vh62utoyxchds5r76tadad.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/piped.conf b/linux/nginx/etc/nginx/conf.d/piped.conf
index af9fd26..e17f46b 100644
--- a/linux/nginx/etc/nginx/conf.d/piped.conf
+++ b/linux/nginx/etc/nginx/conf.d/piped.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net;
+	server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net  5ttqjwhhcxh7apxrge5b5cjqceiibrjlqv2hhtmukwfsitbzqk5hh4id.onion;
+	add_header Onion-Location "http://5ttqjwhhcxh7apxrge5b5cjqceiibrjlqv2hhtmukwfsitbzqk5hh4id.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/projects.conf b/linux/nginx/etc/nginx/conf.d/projects.conf
index 05ab7a7..4df42e2 100644
--- a/linux/nginx/etc/nginx/conf.d/projects.conf
+++ b/linux/nginx/etc/nginx/conf.d/projects.conf
@@ -3,6 +3,7 @@ server {
 	listen 443 ssl;
 	http2 on;
 	server_name projects.cleberg.net;
+	add_header Onion-Location "http://krednuajd2wpt67ozmkollddpbdphpeyh74hbenagzoxqjncrtrgxkid.onion$request_uri" always;
 	root /var/www/projects/;
 	autoindex on;
 	include custom.d/tls/ssl_engine.conf;
@@ -11,3 +12,12 @@ server {
 	include custom.d/basic.conf;
 	location / { try_files $uri $uri/ /index.html; }
 }
+
+server {
+    listen 127.0.0.1:8089;
+    server_name krednuajd2wpt67ozmkollddpbdphpeyh74hbenagzoxqjncrtrgxkid.onion;
+    include custom.d/basic.conf;
+    root /var/www/projects/;
+    autoindex on;
+    location / { try_files $uri $uri/ /index.html; }
+}
diff --git a/linux/nginx/etc/nginx/conf.d/rd.conf b/linux/nginx/etc/nginx/conf.d/rd.conf
index 0e29b8f..217c330 100644
--- a/linux/nginx/etc/nginx/conf.d/rd.conf
+++ b/linux/nginx/etc/nginx/conf.d/rd.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name rd.cleberg.net;
+	server_name rd.cleberg.net  voyxxivcoupelvedthpbjqsrdhkn4ty7qjurvsif4qbjejnldisqs5ad.onion;
+	add_header Onion-Location "http://voyxxivcoupelvedthpbjqsrdhkn4ty7qjurvsif4qbjejnldisqs5ad.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/rimgo.conf b/linux/nginx/etc/nginx/conf.d/rimgo.conf
index 734af08..2d4d60e 100644
--- a/linux/nginx/etc/nginx/conf.d/rimgo.conf
+++ b/linux/nginx/etc/nginx/conf.d/rimgo.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name rimgo.cleberg.net;
+	server_name rimgo.cleberg.net  hcj62a4s6ok23oaa4xjnnvabj2aunod3464iuufh2wtehg2th3rwn3yd.onion;
+	add_header Onion-Location "http://hcj62a4s6ok23oaa4xjnnvabj2aunod3464iuufh2wtehg2th3rwn3yd.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/rl.conf b/linux/nginx/etc/nginx/conf.d/rl.conf
index 8351fa5..7978907 100644
--- a/linux/nginx/etc/nginx/conf.d/rl.conf
+++ b/linux/nginx/etc/nginx/conf.d/rl.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name rl.cleberg.net;
+	server_name rl.cleberg.net  s5wpjol4xe2mszhz4hoqobv4pqmoihb65dz2lbibujjjvhbpjvu45lad.onion;
+	add_header Onion-Location "http://s5wpjol4xe2mszhz4hoqobv4pqmoihb65dz2lbibujjjvhbpjvu45lad.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/search.conf b/linux/nginx/etc/nginx/conf.d/search.conf
index 12bb13b..b676eca 100644
--- a/linux/nginx/etc/nginx/conf.d/search.conf
+++ b/linux/nginx/etc/nginx/conf.d/search.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name search.cleberg.net;
+	server_name search.cleberg.net  txwk667ks3vh76r2mfqiot2wdptentsne64nu6qam63zbpzbmhtkvnid.onion;
+	add_header Onion-Location "http://txwk667ks3vh76r2mfqiot2wdptentsne64nu6qam63zbpzbmhtkvnid.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/send.conf b/linux/nginx/etc/nginx/conf.d/send.conf
index 00d8af1..f1290c5 100644
--- a/linux/nginx/etc/nginx/conf.d/send.conf
+++ b/linux/nginx/etc/nginx/conf.d/send.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name send.cleberg.net;
+	server_name send.cleberg.net 6jcf5qh2yg4axi42nbbcijglvoag74z7oq7xikqueebeb5vykj22miqd.onion;
+	add_header Onion-Location "http://6jcf5qh2yg4axi42nbbcijglvoag74z7oq7xikqueebeb5vykj22miqd.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/slash.conf b/linux/nginx/etc/nginx/conf.d/slash.conf
index 7169138..0267d7f 100644
--- a/linux/nginx/etc/nginx/conf.d/slash.conf
+++ b/linux/nginx/etc/nginx/conf.d/slash.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name slash.cleberg.net;
+	server_name slash.cleberg.net svfj2zs33g572utlou6kx7uamhwen4nxdzvfetnhwjqs4mmdgoayc7qd.onion;
+	add_header Onion-Location "http://svfj2zs33g572utlou6kx7uamhwen4nxdzvfetnhwjqs4mmdgoayc7qd.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
@@ -13,4 +14,4 @@ server {
 		include custom.d/reverse_proxy/basic.conf;
 	}
 	include custom.d/security/robots_index_only.conf;
-}
\ No newline at end of file
+}
diff --git a/linux/nginx/etc/nginx/conf.d/small.conf b/linux/nginx/etc/nginx/conf.d/small.conf
index 76d7c04..8499757 100644
--- a/linux/nginx/etc/nginx/conf.d/small.conf
+++ b/linux/nginx/etc/nginx/conf.d/small.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name small.cleberg.net;
+	server_name small.cleberg.net  w2qsrbzjmlikhwvbhno3qfdjod53iyzlvzjamcvgkcmtbclmdkqerbqd.onion;
+	add_header Onion-Location "http://w2qsrbzjmlikhwvbhno3qfdjod53iyzlvzjamcvgkcmtbclmdkqerbqd.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
diff --git a/linux/nginx/etc/nginx/conf.d/wyl.conf b/linux/nginx/etc/nginx/conf.d/wyl.conf
index 6666901..8d9f975 100644
--- a/linux/nginx/etc/nginx/conf.d/wyl.conf
+++ b/linux/nginx/etc/nginx/conf.d/wyl.conf
@@ -2,7 +2,8 @@ server {
 	listen [::]:443 ssl;
 	listen 443 ssl;
 	http2 on;
-	server_name wyl.cleberg.net;
+	server_name wyl.cleberg.net  rdbegz4y6agv7izjowoicbqmslglnqwt7sk745yls4xm276jmayqtmid.onion;
+	add_header Onion-Location "http://rdbegz4y6agv7izjowoicbqmslglnqwt7sk745yls4xm276jmayqtmid.onion$request_uri" always;
 	include custom.d/tls/ssl_engine.conf;
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;