I2P client node tunneled over Tor for double-layer anonymity. Your I2P traffic (reseed + transport) exits through Tor before touching the I2P network.

your app → SOCKS :4447 → i2pd → Tor (socks://onion:9050) → I2P network

• notransit = true — client only, no relaying others' traffic
• NTCP2 published = false — your real IP is never announced
• Reseed bootstraps through Tor

docker compose up -d

Configure your browser or app to use SOCKS5 proxy at 127.0.0.1:4447 to access .i2p sites.

Wait a few minutes on first start for i2pd to bootstrap and build tunnels.

• I2P web console is disabled (no exposed ports needed)
• Tor is only used by i2pd internally; it does not provide a Tor exit for general use