greg/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

lightning-loop: allow RPC access from main netns

Browse Source 
Note that this also exposes the REST server, which is secured by
macaroon auth like the RPC server.
This commit is contained in:
Erik Arvstedt 2020-10-29 21:20:37 +01:00
parent d76b080b74
commit 8da01fe8a6
No known key found for this signature in database
GPG Key ID: 33312B944DD97846
3 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
modules/lightning-loop.nix
View File

@ -74,14 +74,13 @@ in {
}; };
cli = mkOption { cli = mkOption {
default = pkgs.writeScriptBin "loop" '' default = pkgs.writeScriptBin "loop" ''
${cfg.cliExec} ${cfg.package}/bin/loop \ ${cfg.package}/bin/loop \
--rpcserver ${rpclisten} \ --rpcserver ${rpclisten} \
--macaroonpath '${cfg.dataDir}/${network}/loop.macaroon' \ --macaroonpath '${cfg.dataDir}/${network}/loop.macaroon' \
--tlscertpath '${secretsDir}/loop-cert' "$@" --tlscertpath '${secretsDir}/loop-cert' "$@"
''; '';
description = "Binary to connect with the lightning-loop instance."; description = "Binary to connect with the lightning-loop instance.";
}; };
inherit (nix-bitcoin-services) cliExec;
enforceTor = nix-bitcoin-services.enforceTor; enforceTor = nix-bitcoin-services.enforceTor;
}; };

2
modules/netns-isolation.nix
View File

@ -291,7 +291,7 @@ in {
host = netns.nanopos.address; host = netns.nanopos.address;
}; };
services.lightning-loop.cliExec = mkCliExec "lightning-loop"; services.lightning-loop.rpcAddress = netns.lightning-loop.address;
services.nbxplorer.bind = netns.nbxplorer.address; services.nbxplorer.bind = netns.nbxplorer.address;
services.btcpayserver.bind = netns.btcpayserver.address; services.btcpayserver.bind = netns.btcpayserver.address;

1
pkgs/netns-exec/src/main.c
View File

@ -10,7 +10,6 @@
#include <sys/capability.h> #include <sys/capability.h>
static char *allowed_netns[] = { static char *allowed_netns[] = {
"nb-lightning-loop",
"nb-joinmarket" "nb-joinmarket"
}; };