87 Commits

Author SHA1 Message Date
Jonas Nick
05b8c632f4
Merge fort-nix/nix-bitcoin#457: Add nix-bitcoin security fund information
bdccaa3edd222d6bdf8bb3fdf974f35e592ab076 Add SECURITY.md (nixbitcoin)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK bdccaa3edd222d6bdf8bb3fdf974f35e592ab076
  jonasnick:
    ACK bdccaa3edd222d6bdf8bb3fdf974f35e592ab076

Tree-SHA512: dfcc21a72b9fcc012efa9d4c39cf3ab837287a57364365d1378c6be2f9cff67b04cbb70e45a4eed27c2f1962f53e6b7be947588dda6d051caad81a8096a7ffd0
2022-03-30 12:51:38 +00:00
nixbitcoin
bdccaa3edd
Add SECURITY.md
Including nix-bitcoin security fund information
2022-03-30 12:36:45 +00:00
Jonas Nick
2618af74e4
Merge fort-nix/nix-bitcoin#445: clightning-plugins: add commando plugin
ee4cdb0586117125fd1a2c2329655aeedd601da7 pyln-proto: relax pycparser constraint (William Casarin)
2d6c4e829e655260dd4f33f2dae85ae1e8090ed7 readme: fix monitor c-lightning plugin link (William Casarin)
0bede274a8054f126d8f2bf811ced45efd7cbbe9 clightning-plugins/commando: add module (Erik Arvstedt)
380ec3bb7871ddeb9cc9768433d20af31ee9e5ae clightning-plugins: add commando (William Casarin)
80312ba9d7176a5877a93052b759fb88674566cf python-packages/sha256: init at 0.1 (William Casarin)
71eccb73d63b758aa7c8f404ce5549124c602b5d python-packages/runes: init at 0.4.0 (William Casarin)
570e2716955f3c85092a505860f3ff13ea751953 clightning-plugins: bump to latest git (William Casarin)

Pull request description:

ACKs for top commit:
  erikarvstedt:
    ACK ee4cdb0586117125fd1a2c2329655aeedd601da7

Tree-SHA512: 2db97ee758f061ce72f8e049299c453cc4e9947d9af55c68745aa15bcd9529cb47defb52366ca216249441fb8e113c3b3b048a5381f41fd1ef80e677dae0fe37
2022-02-27 18:38:18 +00:00
William Casarin
2d6c4e829e readme: fix monitor c-lightning plugin link 2022-02-24 08:31:57 -08:00
Erik Arvstedt
0bede274a8 clightning-plugins/commando: add module 2022-02-24 08:31:54 -08:00
nixbitcoin
b8524720a5
lnd: point out SCB functionality more clearly 2022-02-14 14:04:11 +00:00
Erik Arvstedt
1596b3a5d2
minor fixes
- README: fix uppercase

- bitcoind: add whitespace

- hardware-wallets: remove unused variables
2021-12-07 15:35:33 +01:00
Erik Arvstedt
f52059ce3c
docs: add doc 'Configuration and maintenance'
- Move section `updating` from `usage.md` to `configuration.md` and
  rename `usage.md` -> `services.md`.
  `services.md` documents how enable and interact with node services.

- README: Move `docs` below `Get started`. The `docs` section is short and
  should be easily accessible.
2021-11-29 13:47:47 +01:00
Erik Arvstedt
bd275d3a9a
minor improvements
- README:
  - Add RTL

- examples/configuration.nix:
  - Fix comment

- btcpayserver.nix:
  - Use nbLib.addressWithPort
  - Embed optionalString like the other optionalStrings

- clboss.nix:
  - Improve description

- clightning.nix:
  - Option `extraConfig`: Add example, improve description.
  - Disable `log-timestamps`. Timestamps are already logged via journald.
  - Simplify `preStart` script

- electrs.nix:
  - Use `port` description wording like in other services.
2021-11-28 21:18:40 +01:00
Erik Arvstedt
8aa28da110
remove recurring-donations module
This module has failed to evaluate for quite some time.
We might bring it back someday with bolt12 and LNURL support.
2021-11-28 21:18:39 +01:00
Erik Arvstedt
aada35fc7b
minor improvements
- README: add matrix room

- examples/configuration.nix: explain why bitcoind is enabled by default

- btcpayserver: group lnd service settings

- clightning:
  Use public onion port only when the onion service is public

  This allows users to enable the onion service while announcing a
  non-onion public address.

- netns-isolation: move `readOnly` attr to the top

- tests: use mkDefault to allow for easier overriding

- tests/btcpayserver: test web server response
2021-10-30 15:34:48 +02:00
Erik Arvstedt
2cf12d8765
README: minor fixes
- `packages and dependencies are pinned`
  Reworded and moved to `Integrity`
- `most packages are built from the NixOS stable channel...`
  Removed because this is false
- `builds happen in a sandboxed environment`
  Removed because this depends on the user's local nix configuration
  and cannot be enforced by nix-bitcoin
2021-10-04 00:33:27 +02:00
Erik Arvstedt
e57ab83a51
docs/hardware: update
- Update pruning info
- Add Raspberry Pi 4
  Mentioned here: https://github.com/fort-nix/nix-bitcoin/issues/39#issuecomment-917418830
2021-10-04 00:33:27 +02:00
Erik Arvstedt
2a16db6919
readme: add 'Get started' section
Also, shorten the overview a bit by removing some redundancy:
- Remove sentence 'A Bitcoin node verifies ... network.' because
  its content is implied by the use cases (wallet, public infrastructure) mentioned in the
  following sentence.

- 'second layer public infrastructure' -> 'public infrastructure',
  because we're also serving the first layer.
2021-09-26 22:34:39 +02:00
Martin Milata
b666bb2903 charge-lnd: add module 2021-07-12 17:36:31 +02:00
Jonas Nick
4565258f96
README: switch IRC network from freenode to libera 2021-06-13 20:47:19 +00:00
kon
eb21012745 pool: add pkg, module & tests 2021-03-01 10:59:35 +01:00
nixbitcoin
47d257ad3a
docs: add rationale for doas to README and FAQ 2021-02-09 12:44:08 +00:00
Erik Arvstedt
bb3a69797e
README: minor improvements
- Simplify examples link text.
  That the examples README is located in a subdirectory is not relevant here.

- The backup frequency is freely configurable.
  It's set to 'daily' only by secure-node.nix.
2021-02-07 22:39:06 +01:00
nixbitcoin
ebd478fd0d
lnd: add option 'restOnionService' 2021-02-05 09:17:14 +01:00
Erik Arvstedt
a26ed03d77
rename nix-bitcoin-services.nix -> lib.nix 2021-02-04 12:39:48 +00:00
nixbitcoin
8c125ec48c
joinmarket-obwatcher: add pkg & module 2021-01-17 17:40:12 +00:00
Erik Arvstedt
323a431aba
improve nodeinfo
- enable usage outside of secure-node.nix
- use json as the output format
- show ports
- also show local addresses, which is particularly useful when
  netns-isolation is enabled
- only show enabled services
2021-01-14 13:25:10 +01:00
Erik Arvstedt
f6b883a9ac
remove webindex
This module is outdated and incomplete. We can readd an improved version in
the future.

Move nanopos nginx proxy tests to the nanopos test.
2021-01-14 13:25:10 +01:00
Erik Arvstedt
2a240d6f4a
enable-tor: disable default onion services for clightning, lnd, btcpayserver
In case of btcpayserver the default onion service is a security risk
because any visitor can register an admin account on a freshly setup node.
2021-01-14 13:25:09 +01:00
Jonas Nick
79f4723cda
lightning-charge: remove package and module 2021-01-01 19:16:46 +00:00
Jonas Nick
58de79d401
nanopos: remove package and module 2021-01-01 17:37:30 +00:00
nixbitcoin
bcedf69549
readme: update and split into various parts 2020-12-30 15:59:22 +00:00
Erik Arvstedt
1c0233c0a8
use Cirrus CI
- Make more economic use of the free CI resources by removing redundant build tasks:
  - Build unstable pkgs in a single separate task ("pkgs_unstable").
  - All stable pkgs are implicitly built by the modules tests.
- The build script (ci/build.sh) can now be executed locally for easier
  debugging.
- Use an explicit 'cachix push' command instead of helper/wait-for-network-idle.rb.
  This is simpler and more reliable.
2020-12-06 19:07:54 +01:00
Ian Shipman
1d44b99340 add curated clightning plugins 2020-11-18 20:21:34 -06:00
Erik Arvstedt
b574cb097f
examples: add deploy-container-minimal.sh 2020-10-20 12:35:23 +02:00
Erik Arvstedt
c19f7ebb01
examples: add option --interactive|-i 2020-10-18 13:42:58 +02:00
Erik Arvstedt
1cc432a136
examples/deploy-container: use new extra-container features 2020-10-16 15:53:34 +02:00
Erik Arvstedt
c9251e72a1
README: add run-tests.sh to examples 2020-10-16 15:53:33 +02:00
practicalswift
df89ceed39 Fix typos 2020-08-04 13:32:06 +00:00
Candle
56b6ce00af
Missing folder added to path in example 2020-07-09 14:51:16 +00:00
Erik Arvstedt
7ffbe83de3
README: add links to example scripts 2020-04-15 18:57:55 +02:00
Jonas Nick
9239268ab6
Merge #136: Change the nix-bitcoin deployment from forking this repo to importing the module
b2e15c17b8c9fe5c55a271204b5c12e80aba15ec docs: Update to new deployment method (import instead of fork) (Jonas Nick)
5ed0284db99e6659b8be3065db44648d6660d57c Add fetch-release script (Jonas Nick)
c303cd47e4880dae59f8ada846f0c61f0931058f Add push-release.sh helper (Jonas Nick)
705d187a35b728e6091428be3fd07da576516e2a examples/shell.nix: don't run shellHook on subsequent nix-shells (Erik Arvstedt)
65039be65692fee706b03d9049dd08028dfecf11 docs: Remove duplicate instructions (Jonas Nick)
455c5664c9beefc3fc68491523481988801e9536 docs: Replace tabs with spaces (Jonas Nick)
8aa4714979d8296fae023bb21a4a9fc3b0ca3095 docs: Update NixOS version (Jonas Nick)
9df22a2764a550f0f9a94f759a091d1d8cdd1135 add deploy-qemu-vm.sh example (Erik Arvstedt)
548ced19943efd48d12bc4f52bf26b440c43a4f2 README: Add Example section (Jonas Nick)
44ccbb91d0a03211f4b6c1a0349db38a21c0ab09 Clean up development shell.nix (Jonas Nick)
abcee651d3c24213b5efddf7e1532a6eafa70600 add deploy-container.sh (Erik Arvstedt)
5dadea310cc0522c2bf6a6a7771c6889f0ad39e0 add deploy-nixops.sh (Erik Arvstedt)
0c74c365de8cb5df3b9f8433d5e9baecc8df1aac mention performance loss with hardened kernel profile (Erik Arvstedt)
f3121892ef22e269fd799ce38bd2a7aea3f1370e move main module import to configuration.nix (Erik Arvstedt)
0c0978c0073d18d195e8518ca4624592000fb8a9 extract module 'deployment/nixops.nix', add option 'deployment.secretsDir' (Erik Arvstedt)
87d0286498b7d7d9e85a2ac0fa3af650723ca196 Change the nix-bitcoin deployment from forking this repo to importing the module (Jonas Nick)

Pull request description:

Top commit has no ACKs.

Tree-SHA512: 18e8b71f42715c5e82e2dafde9dcc965594d76aacc6be7ee2ec746a9510065749cc65331687a57d7140f45779c3b7867f6260ec224d361fb5a477062a27d6e4c
2020-04-08 15:03:08 +00:00
William Casarin
334e30a291 readme: add travis badge
Signed-off-by: William Casarin <jb55@jb55.com>
2020-04-04 15:00:11 -07:00
Erik Arvstedt
9df22a2764
add deploy-qemu-vm.sh example 2020-03-30 10:56:57 +02:00
Jonas Nick
548ced1994
README: Add Example section 2020-03-30 10:55:50 +02:00
Jonas Nick
67a464d097
Mention problems with hardened kernel and NUCs in README 2019-08-19 20:51:46 +00:00
Jonas Nick
5edf0d7240
Replace liquidd with elementsd package 2019-08-03 14:26:31 +00:00
Jonas Nick
193b6339f9
Merge remote-tracking branch 'upstream-pull/98/head' 2019-07-26 14:20:58 +00:00
nixbitcoin
54dc68810a
Update tested hardware 2019-07-26 13:54:33 +02:00
Jonas Nick
f1f2e7b033
Mention IRC channel in README 2019-07-15 13:39:57 +00:00
nixbitcoin
5523d33d8a
Decline security features from overarching security axioms 2019-05-31 17:26:28 +02:00
Jonas Nick
1797ae7d19
Mention disabling Hyper-Threading and mention ECC 2019-05-18 19:18:00 +00:00
nixbitcoin
64ce7cb261
Bitcoin HWI README entry and various formatting corrections 2019-05-15 16:06:28 +02:00
Jonas Nick
7fb1cc1e93
Add security section to README 2019-04-28 13:15:17 +00:00