diff --git a/cyphernodeconf_docker/templates/lightning/c-lightning/config b/cyphernodeconf_docker/templates/lightning/c-lightning/config
index feea5d9..501b731 100644
--- a/cyphernodeconf_docker/templates/lightning/c-lightning/config
+++ b/cyphernodeconf_docker/templates/lightning/c-lightning/config
@@ -16,6 +16,13 @@ rgb=<%= lightning_nodecolor %>
 
 addr=0.0.0.0:9735
 
+<% if ( features.indexOf('tor') !== -1 ) { %>
+#tor
+proxy=tor:9050
+#always-use-proxy=true
+#disable-dns
+<% } else { %>
 <% if( locals.lightning_external_ip ) { %>
 announce-addr=<%= locals.lightning_external_ip %>:9735
 <% } %>
+<% } %>
diff --git a/cyphernodeconf_docker/templates/tor/torrc b/cyphernodeconf_docker/templates/tor/torrc
index 24f7b92..c00a5fa 100644
--- a/cyphernodeconf_docker/templates/tor/torrc
+++ b/cyphernodeconf_docker/templates/tor/torrc
@@ -3,3 +3,4 @@ HiddenServiceVersion 3
 HiddenServicePort 80 traefik:80
 HiddenServicePort 443 traefik:443
 SocksPort 0.0.0.0:9050
+ExitPolicy reject *:* # no exits allowed