luke/bitcoin-ansible-roles/bitcoind, branch main Ansible roles for Bitcoin and Lightning Network node https://src.nth.io/luke/bitcoin-ansible-roles/atom?h=main 2026-08-09T17:17:36Z bitcoin: natpmp toggle; bump bitcoind 31.1, lnd 0.20.2-beta 2026-08-09T17:17:36Z Luke Hoersten luke@hoersten.org 2026-08-09T17:04:49Z urn:sha1:01bf1a09928ec308cd58fd00005ec85241b5d04f Add bitcoind_natpmp (default on, matching Core 28+); upnp dropped since the official binaries ship without miniupnpc. Bump bitcoind 31.0 -> 31.1 and lnd 0.20.x -> 0.20.2-beta, with sha256 hashes updated from the signed bitcoin SHA256SUMS and the lnd release manifest. bitcoind: verify the release tarball against a pinned sha256 2026-07-31T19:30:29Z Luke Hoersten luke@hoersten.org 2026-07-31T19:30:29Z urn:sha1:960d14f9f2af1990dac0ae887c150d8a9ea00dce Pinned per arch from the official SHA256SUMS; download and unarchive are split so nothing extracts unless the tarball matches. Update the pins when bumping bitcoind_version. bitcoind-prometheus-exporter: grant read access to bitcoin.conf 2026-07-30T23:19:43Z Luke Hoersten luke@hoersten.org 2026-07-30T23:19:43Z urn:sha1:81809160f41aed1161070148d8cf60a1ed24a6f3 The exporter reads rpc credentials from bitcoin.conf but the bitcoind role writes it 0600 bitcoin:bitcoin, so the prometheus user could never read it (only long-lived processes predating the tightened mode kept working). Make the conf group-readable and add prometheus to the bitcoin group. bitcoind: harden the service unit for boot and shutdown 2026-07-30T23:19:43Z Luke Hoersten luke@hoersten.org 2026-07-30T23:19:43Z urn:sha1:4d15c92944280312d47198d6861918b3316784bf - order after network-online: rpcbind fails with getaddrinfo errors when bitcoind starts before addresses are configured - restart on failure so a transient bad start heals itself - 30min stop timeout: the chainstate flush can far exceed systemd's 90s default, and a SIGKILL there risks a slow replay or a reindex bitcoind: bump to 31.0 2026-07-21T00:01:32Z Luke Hoersten luke@hoersten.org 2026-07-21T00:01:32Z urn:sha1:f7ac758286927494d8238a28702b85386a80478e Harden bitcoind and lnd: file permissions, service binding, no_log 2026-04-06T02:24:11Z Luke Hoersten luke@hoersten.org 2026-04-06T01:19:40Z urn:sha1:f2f3906b8e9f1af99de9cf6488d54732a711dfc6 - Config files 0644 -> 0600 - Add no_log: true to config tasks - Bind lnd rpclisten and restlisten to 127.0.0.1 Reverted rev of bitcoind. 2026-03-27T20:25:13Z Luke Hoersten luke@hoersten.org 2026-03-27T20:25:13Z urn:sha1:caf13f1cbef5faf089a27f23b25202660780829c version bumps. 2026-03-27T16:06:26Z Luke Hoersten luke@hoersten.org 2026-03-27T16:06:26Z urn:sha1:083f604f4e3b3cf152cb42be92ea05635d03df59 Fixed logging 2026-03-24T04:33:20Z Luke Hoersten luke@hoersten.org 2026-03-24T04:33:20Z urn:sha1:cb2bfbfa2abd06b52f1d7b40527c8d132eab06a3 Performance tweaks. 2025-09-01T17:37:03Z Luke Hoersten luke@hoersten.org 2025-09-01T17:37:03Z urn:sha1:dc12f6e742dac76c8fb46047dc7313196751a427