nix-bitcoin/docs/usage.md

Updating

Run git pull in the nix-bitcoin directory, enter the nix shell with nix-shell and redeploy with nixops deploy -d bitcoin-node.

Verifying GPG Signatures (recommended)

1. Import jonasnick's gpg key

   gpg2 --receive-key 36C71A37C9D988BDE82508D9B1A70E4F8DCD0366
   

2. Trust jonasnick's gpg key

   gpg2 --edit-key 36C71A37C9D988BDE82508D9B1A70E4F8DCD0366
   trust
   4
   quit
   

3. Verify commit after git pull

   git verify-commit <hash of latest commit>
   

Nodeinfo

Run nodeinfo to see your onion addresses for the webindex, spark, etc. if they are enabled.

Connect to spark-wallet

1. Enable spark-wallet in configuration.nix

   Change

   # services.spark-wallet.enable = true;
   

   to

   services.spark-wallet.enable = true;
   

2. Deploy new configuration.nix

   nixops deploy -d bitcoin-node
   

3. Get the onion address, access key and QR access code for the spark wallet android app

   journalctl -eu spark-wallet
   

   Note: The qr code might have issues scanning if you have a light terminal theme. Try setting it to dark or highlightning the entire output to invert the colors.

4. Connect to spark-wallet android app

   Server Settings
   Scan QR
   Done
   

Connect to electrs

1. Enable electrs in configuration.nix

   Change

   # services.electrs.enable = true;
   

   to

   services.electrs.enable = true;
   

2. Deploy new configuration.nix

   nixops deploy -d bitcoin-node
   

3. Get electrs onion address

   nodeinfo | grep 'ELECTRS_ONION'
   

4. Connect to electrs

   On electrum wallet machine

   electrum --oneserver --server=<ELECTRS_ONION>:50001:t
   

Connect to nix-bitcoin node through ssh Tor Hidden Service

1. Run nodeinfo on your nix-bitcoin node and note the SSHD_ONION

   nixops ssh operator@bitcoin-node
   nodeinfo | grep 'SSHD_ONION'
   

2. Create a SSH key

   ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519
   

3. Place the ed25519 key's fingerprint in the configuration.nix openssh.authorizedKeys.keys field like so

   # FIXME: Add your SSH pubkey
   services.openssh.enable = true;
   users.users.root = {
     openssh.authorizedKeys.keys = [ "[contents of ~/.ssh/id_ed25519.pub]" ];
   };
   

4. Connect to your nix-bitcoin node's ssh Tor Hidden Service, forwarding a local port to the nix-bitcoin node's ssh server

   ssh -i ~/.ssh/id_ed25519 -L [random port of your choosing]:localhost:22 root@[your SSHD_ONION]
   

5. Edit your network-nixos.nix to look like this

   {
     bitcoin-node =
       { config, pkgs, ... }:
       { deployment.targetHost = "127.0.0.1";
       deployment.targetPort = [random port of your choosing];
       };
   }
   

6. Now you can run nixops deploy -d bitcoin-node and it will connect through the ssh tunnel you established in step iv. This also allows you to do more complex ssh setups that nixops ssh doesn't support. An example would be authenticating with Trezor's ssh agent, which provides extra security.