Šepot — end-to-end encrypted messenger

Initial public release. Anonymous on-device identity (no phone number,
e-mail, or password), Signal-protocol cryptography (X3DH + PQXDH, Double
Ratchet, sealed sender) via libsignal, a metadata-minimizing relay,
group chats, disappearing messages, encrypted local storage, optional
Tor transport, and a UI localized into Czech, English, German, Russian,
and Italian.

Monorepo: Flutter client (app/), Rust relay + wire types (rust/),
protobuf definitions (proto/), self-host deploy (deploy/).

Licensed under AGPL-3.0 with an app-store distribution exception (§7).

deploy/relay/tor/torrc

@@ -0,0 +1,15 @@
+# Tor onion vstup pro sepot-relay (onion služba je výchozí přístupový bod)
+#
+# Klíče hidden service žijí ve volume `tor-keys` — ZÁLOHOVAT, ztráta
+# klíčů = nová onion adresa pro všechny klienty.
+DataDirectory /var/lib/tor
+HiddenServiceDir /var/lib/tor/sepot
+HiddenServiceVersion 3
+# port 80 uvnitř onion → relay v docker síti; onion vrstva šifruje,
+# TLS uvnitř není potřeba (standardní praxe)
+HiddenServicePort 80 sepot-relay:8470
+
+# Jen hidden service, žádný SOCKS proxy ven
+SocksPort 0
+# Log bez klientských dat; notice stačí
+Log notice stderr