pleb/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,028 Commits 1 Branch 0 Tags
ecc601a6d6654f782a9d6b5229ab712e9600b4fe
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
nixbitcoin ecc601a6d6 onion-addresses: mirror nix-bitcoin.onionAddresses.access behavior 
This commit fixes an issue with LND, in which if both
nix-bitcoin.onionServices.lnd.public &
services.lnd.restOnionService.enable were enabled, one would try to
create a file named `lnd` and the other would try to create a directory
named `lnd` with a file named `lnd-rest` inside it. This would obiously
cause an error and fail the LND service.
 2021-02-17 11:50:47 +00:00
nixbitcoin e873326bfe modules: use user & group options 
I've tried my best to locate all uses of hardcoded usernames, but its
not guaranteed that all have been found/fixed.
 2021-02-17 11:50:25 +00:00
nixbitcoin ccef870b74 spark-wallet: add user & group options 2021-02-17 11:50:07 +00:00
nixbitcoin 85a1722545 lnd: add user & group options 2021-02-17 11:49:51 +00:00
nixbitcoin 42f7e9f874 joinmarket: 0.8.0-a5e8879 -> 0.8.1 
- Update joinmarket package
- Revert unofficial release settings
- Move Yield Generator config to configFile
- Add new config option max_sweep_fee_change
 2021-02-14 16:23:53 +00:00
nixbitcoin 47e5442910 Update nixpkgs 
Includes CVE-2019-25016 patch
 2021-02-12 09:59:55 +00:00
nixbitcoin b6f6b5e372 lightning-loop: 0.11.2-beta -> 0.11.3-beta 2021-02-10 15:37:29 +00:00
nixbitcoin 47d257ad3a docs: add rationale for doas to README and FAQ 2021-02-09 12:44:08 +00:00
nixbitcoin b0039d68a0 docs: discourage users from ssh'ing into the root user 
Instead recommend using the operator user for all normal system
management tasks.
 2021-02-09 12:44:06 +00:00
nixbitcoin 2ca92a34a5 services: use doas if enabled 
- Remove sudo from recurring-donations path because it's not used by
  the service

- Use doas instead of sudo in secure-node.nix
 2021-02-09 12:44:04 +00:00
nixbitcoin a0f48c9de9 examples: fix deploy-container interactive flag 2021-02-06 11:43:36 +01:00
nixbitcoin 891a69ee8e docs: add zeus usage instructions 2021-02-05 09:17:15 +01:00
nixbitcoin ebd478fd0d lnd: add option 'restOnionService' 2021-02-05 09:17:14 +01:00
nixbitcoin a33c678d3b update nixpkgs-unstable 
Includes c-lightning 0.9.3 and lnd 0.12.0-beta
 2021-02-01 10:11:30 +00:00
nixbitcoin f96591c030 Update nixpkgs 
Includes CVE-2021-3156 patch
 2021-01-27 15:15:47 +00:00
nixbitcoin 69da6f94f1 electrs: v0.8.6 -> v0.8.7 2021-01-20 13:20:18 +00:00
nixbitcoin 8c125ec48c joinmarket-obwatcher: add pkg & module 2021-01-17 17:40:12 +00:00
nixbitcoin 71ee16d767 joinmarket: add enforceTor to firewall scripts on netns-level 2021-01-04 16:09:20 +00:00
nixbitcoin ed636dd070 joinmarket: always synchronize secrets.jm-wallet-password 
secrets.jm-wallet-password is always needed by joinmarket, not just when
joinmarket.yieldgenerator.enable
 2020-12-30 16:49:50 +00:00
nixbitcoin edc657d138 btcpayserver: add rootpath option 2020-12-30 16:47:50 +00:00
nixbitcoin bcedf69549 readme: update and split into various parts 2020-12-30 15:59:22 +00:00
nixbitcoin 196e3c9dbb clboss: add test todo 2020-12-22 09:54:11 +00:00
nixbitcoin f89498d4fc clboss: add module 2020-12-22 09:40:00 +00:00
nixbitcoin 9423eadcee clboss: add pkg 2020-12-22 09:39:37 +00:00
nixbitcoin fdfafb2f40 joinmarket: 0.7.4 -> 0.8.0-bcfa7eb 
Update to 0.8.0 with hotfix for genwallet script
Includes module versioning error with migration instructions
 2020-12-17 11:12:58 +00:00
nixbitcoin c9657305e7 temp: modify get-sha256 for hotfix commit 2020-12-14 16:55:03 +00:00
nixbitcoin 522b0000e6 lightning-loop: 0.11.1-beta -> 0.11.2-beta 2020-12-09 16:13:24 +00:00
nixbitcoin 50372c9f2f lightning-loop: 0.11.0-beta -> 0.11.1-beta 2020-11-18 15:36:38 +00:00
nixbitcoin 546053511b lightning-loop: 0.10.0-beta -> 0.11.0-beta 2020-11-06 08:51:30 +00:00
nixbitcoin f2faf708fb test: update joinmarket query strings 
JoinMarket changed message strings in
https://github.com/JoinMarket-Org/joinmarket-clientserver/commit/a2aafd254d07d97166ed4f3a549238612b316dd2 and removed P2EPDaemonServerProtocolFactory in v0.7.1
 2020-11-06 08:51:27 +00:00
nixbitcoin 59e128a994 joinmarket: add payjoin configuration 2020-11-06 08:51:25 +00:00
nixbitcoin f29f04c0c4 secure-node: LND no longer requires ControlPort 
Onion service is now generated through mkHiddenService function.
 2020-11-06 08:51:23 +00:00
nixbitcoin d4c0653c64 joinmarket: 0.7.0 -> 0.7.2 2020-11-06 08:51:15 +00:00
nixbitcoin 486f385fdd lightning-loop: 0.9.0 -> 0.10.0 
Includes macaroon authentication
 2020-10-19 08:59:14 +00:00
nixbitcoin 480df0dd65 elementsd: 0.18.1.8 -> 0.18.1.9 2020-10-18 16:00:08 +00:00
nixbitcoin 1f2f910774 spark-wallet: 0.2.16 -> 0.2.17 2020-10-18 16:00:06 +00:00
nixbitcoin 73f4275d2a backups: add btcpayserver database 2020-09-24 17:12:08 +00:00
nixbitcoin a89a3e934f test: increase diskSize 2020-09-24 16:54:54 +00:00
nixbitcoin 24b506ff8a tests: simplify lightning-loop test 2020-09-24 16:40:50 +00:00
nixbitcoin e7c5f956ea lightning-loop: update module 
* commandlineArgs -> configFile
* introduce tls certs
* loop dataDir
* fix formatting and descriptions

Warning: Manual migration of existing loop data directory necessary
 2020-09-24 16:40:11 +00:00
nixbitcoin 4a503f57bd lightning-loop: v0.8.1 -> v0.9.0 2020-09-24 16:39:36 +00:00
nixbitcoin 0784e2d479 Revert "temp: mirror erikarvstedt btcpayserver" 
This reverts commit 99295328b4.
Removes nbxplorer/btcpayserver from travis
Adds nbxplorer/btcpayserver to pinned.nix
 2020-09-24 09:33:46 +00:00
nixbitcoin 7764f36405 pkgs: update pinned nixpkgs 2020-09-24 09:33:44 +00:00
nixbitcoin 1918af69e1 docs: fix joinmarket usage instructions 2020-09-22 17:32:08 +00:00
nixbitcoin dd882753e6 joinmarket: add usage documentation 2020-09-22 13:50:55 +00:00
nixbitcoin d0701f518c joinmarket: automatically generate wallet 2020-09-22 13:50:49 +00:00
nixbitcoin d6d3e8ff62 joinmarket: add tests 2020-09-22 13:50:45 +00:00
nixbitcoin cce27da2ec backups: add joinmarket datadir to includelist 2020-09-22 13:50:43 +00:00
nixbitcoin 173891fa5b joinmarket: add module 2020-09-22 13:50:37 +00:00
nixbitcoin 263525d724 nix-bitcoin-services: add nb-services.privileged helper 2020-09-22 13:43:15 +00:00
nixbitcoin f00d1d24c5 joinmarket: add pkg and local dependencies 2020-09-22 13:43:08 +00:00
nixbitcoin 3cfb9d074b btcpayserver: sqlite -> postgresql 2020-09-17 10:17:33 +00:00
nixbitcoin c9c844de80 btcpayserver: add tests 2020-09-15 12:09:35 +00:00
nixbitcoin f93c3c8405 backups: add nbxplorer and btcpayserver datadir to includelist 2020-09-15 12:09:33 +00:00
nixbitcoin 605b37c16e nodeinfo: add btcpayserver onion 2020-09-15 12:09:31 +00:00
nixbitcoin 15b574faa7 nbxplorer/btcpayserver: add module 2020-09-15 12:09:12 +00:00
nixbitcoin 46d681a17e lnd: generate custom macaroons 
Create new `macaroon` option that allows any module to place its own
custom macaroon in the lnd RuntimeDirectory `/run/lnd`.
 2020-09-15 12:09:02 +00:00
nixbitcoin b97584f5cb netns: allow return traffic to outgoing connections 2020-09-15 12:08:58 +00:00
nixbitcoin fc15d507ff loop: adjust test to new message 2020-08-30 08:07:02 +00:00
nixbitcoin e56d5365cb loop: update 0.7.0 -> 0.8.1 2020-08-30 07:59:01 +00:00
nixbitcoin 22c3fd52e1 backups: add feature test 2020-08-04 15:25:39 +00:00
nixbitcoin e4fb7a52de backups: add module 2020-08-04 15:25:37 +00:00
nixbitcoin e650df30d5 bitcoind: bump rpcthread count 2020-08-04 14:46:57 +00:00
nixbitcoin 46e15ee9cc tests: make lnd & clightning tests run concurrently 2020-08-04 14:07:12 +00:00
nixbitcoin ac96fd59db assertions: make lnd.enable depend on !clightning.enable or port != 9735 2020-08-04 14:07:10 +00:00
nixbitcoin 3ed564ea06 lnd: make listen IP address only 2020-08-04 14:07:08 +00:00
nixbitcoin 716e98789c lnd: add listenPort option 2020-08-04 14:07:06 +00:00
nixbitcoin 43da15557d clightning: refactor bind-addr to be IP address only 
With typecheck
 2020-08-04 14:07:02 +00:00
nixbitcoin d99ccc8445 clightning: add bindport option 2020-08-04 12:42:57 +00:00
nixbitcoin e9204946d4 lightning-loop: add tests 2020-07-28 15:55:54 +00:00
nixbitcoin 491d83a658 lightning-loop: add module 2020-07-28 15:55:52 +00:00
nixbitcoin 8f3588b13f lnd: higher attempt limit for less-powerful machines 
Opening main database sometimes takes longer than 50 ExecStartPost
restPort connection attempts.
 2020-07-28 15:55:50 +00:00
nixbitcoin 1bb801ad7b lightning-loop: add pkg 2020-07-28 15:55:48 +00:00
nixbitcoin 5086fc3234 bitcoin: drive-by prune fix 2020-07-28 14:32:54 +00:00
nixbitcoin 21c0fb440d rpcwhitelist: add feature test 2020-07-28 14:32:52 +00:00
nixbitcoin 1bf45a9547 bitcoind: add rpcwhitelist feature 
Default behavior for rpc whitelisting is set to 0, which means that
rpcwhitelisting is only enforced for rpc users for whom an `rpcwhitelist`
exists.
 2020-07-28 14:32:50 +00:00
nixbitcoin 5a978a2836 bitcoind: switch from rpcpassword to rpcauth 
Includes bitcoind's `share/rpcauth` to convert apg generated passwords
into salted HMAC-SHA-256 hashed passwords.
 2020-07-28 14:32:47 +00:00
nixbitcoin 6a8e29e016 tests: add dbus-hardening and hideProcessInformation 2020-07-28 11:37:16 +00:00
nixbitcoin 0248e6493f systemd: lock down systemctl status 
Mitigates a security issue that allows unprivileged users to read other
unprivileged user's processes' credentials from CGroup using `systemctl
status`.
 2020-07-28 11:28:09 +00:00
nixbitcoin 6365412312 test-script: remove nginx tls proxy test 2020-07-21 13:58:32 +00:00
nixbitcoin 4dbc348921 electrs: remove TLSProxy 
https://github.com/spesmilo/electrum/issues/5278 was resolved
 2020-07-21 13:41:03 +00:00
nixbitcoin 02853067a1 bitcoind: postStart wait until bitcoind can receive rpc calls 2020-07-21 13:23:07 +00:00
nixbitcoin 681728294b tests: run scenarios as multiple Travis jobs 2020-07-21 09:39:01 +00:00
nixbitcoin 43ce847e2b tests: allow running integration tests with different configurations 2020-07-21 09:38:59 +00:00
nixbitcoin 8783f38fba tests: add netns to testing framework 2020-07-21 09:38:57 +00:00
nixbitcoin 25adce29e5 secure-node: only mkHiddenServices if services are enabled 2020-07-21 09:38:55 +00:00
nixbitcoin c542b92e55 nginx: add netns 
- Adds nginx to netns-isolation.services
- Adds host option (defaults to localhost) as target of hidden service
 2020-07-21 09:38:53 +00:00
nixbitcoin ef89607704 recurring-donations: add netns 
- Adds recurring-donations to netns-isolation.services
- Adds cfg.enforceTor to bring recurring-donations in line with other
  services
- Removes torsocks dependency in favor of `curl --socks-hostname`
 2020-07-21 09:38:51 +00:00
nixbitcoin 582cb86d74 nanopos: add netns 
- Adds nanopos to netns-isolation.services
- Adds cfg.enforceTor and extraArgs to bring nanopos in line with other
  services
- Adds charged-url option to allow using nanopos with network
  namespaces.
- Modularizes nginx so webindex can be used without nanopos.
- Adds host option (defaults to localhost) as target of hidden service
- Removes unnecessary after
 2020-07-21 09:38:49 +00:00
nixbitcoin 7369f0a7ec lightning-charge: add netns 
- Adds lightning-charge to netns-isolation.services
- Adds cfg.enforceTor to bring lightning-charge in line with other
  services
- Adds extraArgs option to allow using lightning-charge with network
  namespaces
- Adds host option (defaults to localhost) as target of hidden service
 2020-07-21 09:38:47 +00:00
nixbitcoin c4ab73d51f spark-wallet: add netns 
- Adds spark-wallet to netns-isolation.services
- Adds extraArgs option to allow using spark-wallet with network
  namespaces
- Adds host option (defaults to localhost) as target of hidden service
- Adds enforceTor option to bring in line with other services
 2020-07-21 09:38:45 +00:00
nixbitcoin d6296acaba electrs: add netns 
- Adds electrs to netns-isolation.services
- Adds daemonrpc option and specifies address option to allow using
  electrs with network namespaces
- Adds host option (defaults to localhost) as target of hidden service
 2020-07-21 09:38:43 +00:00
nixbitcoin c0b02ac93a liquid: add netns cli script 2020-07-21 09:38:41 +00:00
nixbitcoin 672a416ede liquidd: add netns 
- Adds liquidd to netns-isolation.services
- Adds rpcbind, rpcallowip, and mainchainrpchost options to allow using
  liquidd with network namespaces
- Adds bind option (defaults to localhost) as target of hidden service
 2020-07-21 09:38:39 +00:00
nixbitcoin 4b8ca52647 lnd: add netns cli script 2020-07-21 09:38:37 +00:00
nixbitcoin c55296433d lnd: add netns 
- Adds lnd to netns-isolation.services
- Specifies listen option (defaults to localhost) as target of
  hiddenService.
- Amends hardcoded lnd ip to lnd-cert

WARNING: Breaking changes for lnd cert. lnd-key and lnd-cert will have
to be deleted and redeployed.
 2020-07-21 09:38:35 +00:00
nixbitcoin f3d2aaa5d4 lnd: prepare for netns and bring in line with clightning 
- Adds bitcoind-host, and tor-socks options to allow using with
  network namespaces.
- Adds listen, rpclisten, and restlisten option to specify host on which
  to listen on for peer, rpc and rest connections respectively
- Adds announce-tor option and generates Tor Hidden Service with nix
  instead of lnd to bring in line with clightning.

WARNING: Breaking changes for Tor Hidden Service. Manual migration
necessary.
 2020-07-21 09:38:32 +00:00
nixbitcoin 3c0c446547 clightning: add netns 
- Adds clightning to netns-isolation.services
- Adds bitcoin-rpcconnect option to allow using clightning with network
  namespaces
- Uses bind-addr option (defaults to localhost) as target of hidden service
- Adds different bind-addr options depending on if netns-isolation is
  enabled or not.
 2020-07-21 09:38:30 +00:00
nixbitcoin ae1230e13b clightning: remove bitcoin-rpcuser option 
Simplifies the clightning module.
 2020-07-21 09:38:28 +00:00
nixbitcoin 65b5dab3d4 clightning: add announce-tor 
From the clightning manpage:

autolisten=BOOL By default, we bind (and maybe announce) on IPv4 and
IPv6 interfaces if no addr, bind-addr or  announce-addr options  are
specified. Setting this to false disables that.

We already set bind-addr by default, so autolisten had no effect.
Therefore, this commit replaces autolisten with the more granular
announce-addr option.

For now we are Tor-only, so we only need to announce our hidden service
to accept incoming connections. In the future, we can add clearnet
connectivity with `addr` and route connections into our netns with NAT.
 2020-07-21 09:38:26 +00:00