http://treasurechest.i2p/setup.html
On top of this, I apply some good practices for additional peace of mind: all the chest's services (HTTP and SFTP), plus I2P, run with the least privilege needed when a service needs to run as root (like the SFTP server, which needs to call chuid()), it is placed inside a chroot jail. This jail contains only the necessary directories, mounted with restrictive permissions (read-only and disallowing executables wherever possible), and it also contains modified versions of...