f6b883a9ac
This module is outdated and incomplete. We can readd an improved version in the future. Move nanopos nginx proxy tests to the nanopos test.
80 lines
2.0 KiB
Nix
80 lines
2.0 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services;
|
|
|
|
operatorName = config.nix-bitcoin.operator.name;
|
|
|
|
mkHiddenService = map: {
|
|
map = [ map ];
|
|
version = 3;
|
|
};
|
|
in {
|
|
imports = [
|
|
../modules.nix
|
|
../nodeinfo.nix
|
|
./enable-tor.nix
|
|
];
|
|
|
|
config = {
|
|
# For backwards compatibility only
|
|
nix-bitcoin.secretsDir = mkDefault "/secrets";
|
|
|
|
networking.firewall.enable = true;
|
|
|
|
nix-bitcoin.security.hideProcessInformation = true;
|
|
|
|
services.tor.hiddenServices.sshd = mkHiddenService { port = 22; };
|
|
nix-bitcoin.onionAddresses.access.${operatorName} = [ "sshd" ];
|
|
|
|
# bitcoind
|
|
services.bitcoind = {
|
|
enable = true;
|
|
listen = true;
|
|
dataDirReadableByGroup = mkIf cfg.electrs.high-memory true;
|
|
assumevalid = "00000000000000000000e5abc3a74fe27dc0ead9c70ea1deb456f11c15fd7bc6";
|
|
addnodes = [ "ecoc5q34tmbq54wl.onion" ];
|
|
discover = false;
|
|
addresstype = "bech32";
|
|
dbCache = 1000;
|
|
# higher rpcthread count due to reports that lightning implementations fail
|
|
# under high bitcoind rpc load
|
|
rpc.threads = 16;
|
|
};
|
|
|
|
# liquidd
|
|
services.liquidd = {
|
|
rpcuser = "liquidrpc";
|
|
prune = 1000;
|
|
validatepegin = true;
|
|
listen = true;
|
|
};
|
|
|
|
# Backups
|
|
services.backups = {
|
|
program = "duplicity";
|
|
frequency = "daily";
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
tor
|
|
jq
|
|
qrencode
|
|
];
|
|
|
|
nix-bitcoin.operator.enable = true;
|
|
users.users.${operatorName} = {
|
|
openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
|
|
};
|
|
# Enable nixops ssh for operator (`nixops ssh operator@mynode`) on nixops-vbox deployments
|
|
systemd.services.get-vbox-nixops-client-key =
|
|
mkIf (builtins.elem ".vbox-nixops-client-key" config.services.openssh.authorizedKeysFiles) {
|
|
postStart = ''
|
|
cp "${config.users.users.root.home}/.vbox-nixops-client-key" "${config.users.users.${operatorName}.home}"
|
|
'';
|
|
};
|
|
};
|
|
}
|