Initial release: ghost_protocol privacy toolkit

2026-03-04 09:13:16 -05:00
commit 973cede31f
99 changed files with 12158 additions and 0 deletions
@@ -0,0 +1,85 @@
+# /etc/opsec/levels/cloud-normal.conf — Cloud VPS (Standard)
+# Privacy-focused cloud deployment. Ghost mode available via: opsec-mode on
+# No MAC/hostname/screen/USB (hardware-irrelevant on cloud).
+# Apply via: sudo opsec-config.sh --level apply cloud-normal
+
+# ─── LEVEL TYPE ───────────────────────────────────────────────────────────────
+LEVEL_TYPE="standard"
+
+# ─── ACTIVE PROFILE ────────────────────────────────────────────────────────────
+PROFILE_NAME="default"
+
+# ─── BASE STATE (always active in standard mode) ─────────────────────────────
+BASE_DNS="quad9"
+BASE_MAC_RANDOMIZE="0"
+BASE_IPV6_DISABLE="1"
+
+# ─── TOR SETTINGS (used when ghost mode is toggled ON) ───────────────────────
+TOR_CIRCUIT_ROTATION="30"
+TOR_BLACKLIST=""
+TOR_STRICT_NODES="1"
+TOR_ISOLATION="1"
+TOR_PADDING="0"
+TOR_SOCKS_PORT="9050"
+TOR_DNS_PORT="5353"
+TOR_NUM_GUARDS="3"
+TOR_SAFE_LOGGING="1"
+
+# ─── DNS SETTINGS ─────────────────────────────────────────────────────────────
+DNS_MODE="tor"
+DNS_CUSTOM_SERVERS=""
+
+# ─── KILL SWITCH ───────────────────────────────────────────────────────────────
+KILLSWITCH_ALLOW_DHCP="1"
+KILLSWITCH_ALLOW_OPENVPN="1"
+KILLSWITCH_ALLOW_WIREGUARD="1"
+KILLSWITCH_EXTRA_PORTS=""
+
+# ─── MAC ADDRESS ───────────────────────────────────────────────────────────────
+MAC_INTERFACES="auto"
+MAC_VENDOR_SPOOF=""
+
+# ─── HOSTNAME ──────────────────────────────────────────────────────────────────
+HOSTNAME_PATTERN="desktop"
+HOSTNAME_CUSTOM_PREFIX=""
+
+# ─── SYSTEM HARDENING ──────────────────────────────────────────────────────────
+HARDEN_IPV6="1"
+HARDEN_SWAP="1"
+HARDEN_CORE_DUMPS="1"
+HARDEN_CLIPBOARD_CLEAR="0"
+HARDEN_SCREEN_LOCK="0"
+HARDEN_SCREEN_LOCK_TIMEOUT="300"
+HARDEN_TIMEZONE_SPOOF="0"
+HARDEN_TIMEZONE_VALUE="UTC"
+HARDEN_LOCALE_SPOOF="0"
+HARDEN_LOCALE_VALUE="en_US.UTF-8"
+
+# ─── LEAK PREVENTION ──────────────────────────────────────────────────────────
+LEAK_WEBRTC_BLOCK="1"
+LEAK_USB_BLOCK="0"
+
+# ─── MONITORING ────────────────────────────────────────────────────────────────
+MONITOR_PROCESSES="1"
+MONITOR_LOG_ROTATION="1"
+LOG_ROTATION_HOURS="1"
+
+# ─── TRAFFIC SHAPING ──────────────────────────────────────────────────────────
+TRAFFIC_JITTER_ENABLED="0"
+TRAFFIC_JITTER_MS="50"
+
+# ─── TOR BRIDGES ──────────────────────────────────────────────────────────────
+TOR_BRIDGE_MODE="off"
+TOR_BRIDGE_RELAY=""
+
+# ─── SECURE DELETION ──────────────────────────────────────────────────────────
+WIPE_METHOD="auto"
+
+# ─── DEPLOYMENT LEVEL ─────────────────────────────────────────────────────────
+DEPLOYMENT_LEVEL="cloud-normal"
+
+# ─── TERMINAL BANNER ──────────────────────────────────────────────────────────
+OPSEC_BANNER="compact"
+
+# ─── WIDGET THEME ─────────────────────────────────────────────────────────────
+WIDGET_THEME="default"