{"id":14329,"date":"2026-10-10T19:41:49","date_gmt":"2026-10-10T19:41:49","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=14329"},"modified":"2026-10-10T19:41:49","modified_gmt":"2026-10-10T19:41:49","slug":"btcpay-tor-access-becomes-opt-in-at-the-next-docker-update","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=14329","title":{"rendered":"BTCPay Tor access becomes opt-in at the next Docker update"},"content":{"rendered":"<p><\/p>\n<div data-cs-editorial-figure-scope=\"\" data-cs-editorial-quote-scope=\"\" data-cs-image-viewer-scope=\"\" data-single-article-content=\"\">\n<p>Operators running the Bitcoin payment software BTCPay Server through its standard Docker deployment must explicitly select Tor at their next setup or update if they want to retain onion access. The change removes Tor from the automatically included components, making a previously bundled service an administrator\u2019s configuration choice.<\/p>\n<p>BTCPay detailed the deployment change in its Oct. 5 announcement accompanying version 2.4.5. The official GitHub release page records the software release on Oct. 6. For existing installations, the relevant trigger is their next Docker setup or update.<\/p>\n<div class=\"cs-article-embed\">\n<p> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">Malicious bots are actively probing exposed Bitcoin payment servers to steal master administrative keys<\/h3>\n<\/p>\n<p> <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\"> <i class=\"fa-light fa-arrow-up-right\"\/> <\/span> <\/div>\n<p>The change matters to Docker operators who rely on Tor, including access through their server\u2019s onion address, but previously received it through the core BTCPay Server fragment. Fragments are the configuration components used to assemble the Docker stack.<\/p>\n<p>BTCPay advises administrators to review the deployment changes before updating. After updating to 2.4.5, its instruction for enabling Tor is:<\/p>\n<p><code>sudo btcpay-fragments add opt-add-tor<\/code><\/p>\n<p>Tor remains supported, and BTCPay says existing data stays in the current Tor volumes. That preserves stored data; continued onion access still depends on including and running Tor in the deployment.<\/p>\n<div class=\"cs-article-embed\">\n<p> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">Bitcoin Core\u2019s privacy fix reaches v32 code while the v31 patch remains open<\/h3>\n<\/p>\n<p> <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\"> <i class=\"fa-light fa-arrow-up-right\"\/> <\/span> <\/div>\n<p>BTCPay Server documentation describes the optional Tor fragment <code>opt-add-tor<\/code> as adding hidden services and selected onion connectivity. Operators can inspect configuration using <code>btcpay-fragments show<\/code>, which does not change configuration and reports saved additional and excluded fragments alongside the effective fragments from the last generated manifest.<\/p>\n<aside id=\"cs-inline-newsletter-1\" class=\"cs-inline-newsletter cs-newsletter-brand\" data-newsletter-edition=\"catalyst\" data-inline-newsletter=\"\" data-newsletter-placement=\"article-midpoint\" aria-labelledby=\"cs-inline-newsletter-1-title\" aria-describedby=\"cs-inline-newsletter-1-copy\">\n<div class=\"cs-inline-newsletter__inner\">\n<div class=\"cs-inline-newsletter__content\">\n<div class=\"cs-inline-newsletter__editorial\">\n<p class=\"cs-inline-newsletter__eyebrow\">The Catalyst<\/p>\n<p class=\"cs-newsletter-frequency\">Daily Newsletter<\/p>\n<h2 id=\"cs-inline-newsletter-1-title\" class=\"cs-inline-newsletter__title\">Know what\u2019s moving crypto.<\/h2>\n<p id=\"cs-inline-newsletter-1-copy\" class=\"cs-inline-newsletter__copy\">Start with the stories that matter. Get the context behind the headlines and a clear view of what to watch next.<\/p>\n<\/div>\n<div class=\"cs-inline-newsletter__art\" aria-hidden=\"true\"> <img loading=\"lazy\" src=\"https:\/\/cryptoslate.com\/wp-content\/themes\/cryptoslate-2020\/images\/catalyst-newsletter-scrapbook-v3.webp\" alt=\"\" width=\"640\" height=\"640\" loading=\"lazy\" decoding=\"async\"\/><img loading=\"lazy\" class=\"lazyload\" src=\"https:\/\/cryptoslate.com\/wp-content\/themes\/cryptoslate-2020\/images\/catalyst-newsletter-scrapbook-v3.webp\" alt=\"\" width=\"640\" height=\"640\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<\/div>\n<\/div>\n<\/aside>\n<p>Fragment-changing commands require root and reapply setup immediately.<\/p>\n<p><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter shoggoth-infographic shoggoth-infographic-portrait wp-image-570943\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b.png\" alt=\"BTCPay Docker maintenance flow showing Tor configuration inspection, the post-update opt-add-tor command, preserved Tor volumes and the distinction between data retention and uninterrupted onion access.\" width=\"720\" height=\"1000\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b.png 1064w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b-216x300.png 216w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b-737x1024.png 737w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b-768x1067.png 768w\" sizes=\"auto, (max-width: 720px) 100vw, 720px\"\/><img loading=\"lazy\" loading=\"lazy\" decoding=\"async\" class=\"lazyload aligncenter shoggoth-infographic shoggoth-infographic-portrait wp-image-570943\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b.png\" alt=\"BTCPay Docker maintenance flow showing Tor configuration inspection, the post-update opt-add-tor command, preserved Tor volumes and the distinction between data retention and uninterrupted onion access.\" width=\"720\" height=\"1000\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b.png 1064w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b-216x300.png 216w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b-737x1024.png 737w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-e64af084-7cc3-4cf1-8457-f8443fda978b-768x1067.png 768w\" data-sizes=\"(max-width: 720px) 100vw, 720px\"\/><\/p>\n<h2>Private services need separate exceptions<\/h2>\n<p>The 2.4.5 release notes also identify a breaking change for outbound HTTP requests: private-network destinations are blocked by default for Lightning connections, LNURL requests, invoice notification URLs and webhooks. The restriction is intended to prevent server-side request forgery, or SSRF.<\/p>\n<p>With that protection enabled, operators intentionally using private services must allow the needed destinations through <code>ssrfexceptions<\/code>.<\/p>\n<p>BTCPay\u2019s operator guide says to restart the application and exercise the affected integration after changing the setting.<\/p>\n<div class=\"cs-article-embed\">\n<p> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">Lightning Labs discloses critical bug marking canceled invoices paid, risking free product delivery<\/h3>\n<\/p>\n<p> <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\"> <i class=\"fa-light fa-arrow-up-right\"\/> <\/span> <\/div>\n<\/div>\n<p>Featured,Payments,Privacy,Technology,Bitcoin,BTC,paymentsBitcoin,BTC,payments#BTCPay #Tor #access #optin #Docker #update1791661309<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Operators running the Bitcoin payment software BTCPay Server through its standard Docker deployment must explicitly select Tor at their next setup or update if they want to retain onion access. The change removes Tor from the automatically included components, making a previously bundled service an administrator\u2019s configuration choice. BTCPay detailed the deployment change in its<\/p>\n","protected":false},"author":1,"featured_media":14330,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[996,91,285,7348,6813,7350,167,7349,728],"class_list":["post-14329","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-access","tag-bitcoin","tag-btc","tag-btcpay","tag-docker","tag-optin","tag-payments","tag-tor","tag-update"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>BTCPay Tor access becomes opt-in at the next Docker update - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"BTCPay Tor access needs an explicit Docker choice during maintenance, alongside separate restrictions on private-service HTTP requests.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=14329\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"BTCPay Tor access becomes opt-in at the next Docker update\" \/>\n<meta property=\"og:description\" content=\"BTCPay Tor access needs an explicit Docker choice during maintenance, alongside separate restrictions on private-service HTTP requests.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=14329\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-10T19:41:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/btcpay-tor-server-reconnection.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14329\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=14329\",\"name\":\"BTCPay Tor access becomes opt-in at the next Docker update - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14329#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14329#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/btcpay-tor-server-reconnection.webp\",\"datePublished\":\"2026-10-10T19:41:49+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"BTCPay Tor access needs an explicit Docker choice during maintenance, alongside separate restrictions on private-service HTTP requests.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14329#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=14329\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14329#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/btcpay-tor-server-reconnection.webp\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/btcpay-tor-server-reconnection.webp\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=14329#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"BTCPay Tor access becomes opt-in at the next Docker update\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"BTCPay Tor access becomes opt-in at the next Docker update - Crypto News: Latest Cryptocurrency News and Analysis","description":"BTCPay Tor access needs an explicit Docker choice during maintenance, alongside separate restrictions on private-service HTTP requests.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=14329","og_locale":"en_US","og_type":"article","og_title":"BTCPay Tor access becomes opt-in at the next Docker update","og_description":"BTCPay Tor access needs an explicit Docker choice during maintenance, alongside separate restrictions on private-service HTTP requests.","og_url":"https:\/\/cryptonews.uk.com\/?p=14329","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-10-10T19:41:49+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/btcpay-tor-server-reconnection.webp","type":"image\/webp"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=14329","url":"https:\/\/cryptonews.uk.com\/?p=14329","name":"BTCPay Tor access becomes opt-in at the next Docker update - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=14329#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=14329#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/btcpay-tor-server-reconnection.webp","datePublished":"2026-10-10T19:41:49+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"BTCPay Tor access needs an explicit Docker choice during maintenance, alongside separate restrictions on private-service HTTP requests.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=14329#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=14329"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=14329#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/btcpay-tor-server-reconnection.webp","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/10\/btcpay-tor-server-reconnection.webp","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=14329#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"BTCPay Tor access becomes opt-in at the next Docker update"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/14329","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14329"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/14329\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/14330"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14329"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14329"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14329"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}