Although the Java I2P router comes pre-configured with a static web server, jetty, to provide the user's first eepSite, many require more sophisticated functionality from their web server and would rather create an eepSite with a different server. This is of course possible, and actually is really easy once you've done it one time.
Although it is easy to do, there are a few things you should consider before doing it. You will want to remove identifying characteristics from your web server, like potentially identifying headers and default error pages that report the server/distro type. More information about threats to anonymity posed by improperly configured applications see: Riseup here:, Whonix Here:, This blog article for some opsec fails:, and the I2P applications page here. Although much of this information is expressed for Tor Onion Services, the same procedures and principles apply to hosting applications over I2P.
Step One: Open the Tunnel Wizard
Go to the I2P web interface at 127.0.0.1:7657 and open the Hidden Services Manager(links to localhost). Click the button that says "Tunnel Wizard" to begin.
Step Two: Select a Server Tunnel
The tunnel wizard is very simple. Since we're setting up an http server, all we need to do is select a server tunnel.
Step Three: Select an HTTP Tunnel
An HTTP tunnel is the tunnel type that is optimized for hosting HTTP services. It has filtering and rate-limiting features enabled that are tailored specifically to that purpose. A standard tunnel may work as well, but if you select a atandard tunnel you'll need to take care of those security features yourself. A more in-depth dive into the HTTP Tunnel configuration is available in the next tutorial.
Step Four: Give it a name and a description
For your own benefit and ability to remeber and distinguish the what you are using the tunnel for, give it a good nickname and description. If you need to come back and do more management later, then this is how you will identify the tunnel in the hidden services manager.
Step Five: Configure the Host and Port
In this step, you point the web server at the TCP port where your web server is listening. Since most web servers listen on port 80 or port 8080, the example shows that. If you use alternate ports or virtual machines or containers to isolate your web services, you may need to adjust the host, port, or both.
Step Six: Decide whether to start it automatically
I cannot think of a way to elaborate on this step.
Step Seven: Review your settings
Finally, take a look at the settings you have selected. If you approve, save them. If you did not choose to start the tunnel automatically, go to the hidden services manager and start it manually when you wish to make your service available.
Appendix: HTTP Server Customization Options
I2P provides a detailed panel for configuring the http server tunnel in custom ways. I'll finish this tutorial by walking through all of them. Eventually.
