src.nth.io/

summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
3 dayslnd: verify release tarballs against pinned sha256sLuke Hoersten2-5/+31
lnd sums come from the signed release manifest. lndconnect publishes no checksums, so its pin is the tarball hash cross-checked against the binary in production since 2020.
3 daysbitcoind: verify the release tarball against a pinned sha256Luke Hoersten2-1/+17
Pinned per arch from the official SHA256SUMS; download and unarchive are split so nothing extracts unless the tarball matches. Update the pins when bumping bitcoind_version.
4 daysbitcoind-prometheus-exporter: grant read access to bitcoin.confLuke Hoersten2-1/+13
The exporter reads rpc credentials from bitcoin.conf but the bitcoind role writes it 0600 bitcoin:bitcoin, so the prometheus user could never read it (only long-lived processes predating the tightened mode kept working). Make the conf group-readable and add prometheus to the bitcoin group.
4 daysbitcoind: harden the service unit for boot and shutdownLuke Hoersten1-1/+11
- order after network-online: rpcbind fails with getaddrinfo errors when bitcoind starts before addresses are configured - restart on failure so a transient bad start heals itself - 30min stop timeout: the chainstate flush can far exceed systemd's 90s default, and a SIGKILL there risks a slow replay or a reindex
8 dayslnurld/build: create build_work_dir and redirect Go cachesLuke Hoersten1-0/+14
Create the work dir and set GOPATH/GOCACHE/GOMODCACHE on the build task, so the role is self-contained rather than relying on the playbook's environment.
8 dayslnurld/build: force a real tarball for the single-file artifactLuke Hoersten1-0/+3
community.general.archive (>=10) compresses a lone file into a bare .gz instead of a tarball, which the server can't unarchive. Set force_archive: true.
8 dayslnurld/build: stage checkout under build_work_dir instead of /tmpLuke Hoersten1-1/+1
14 daysbitcoind: bump to 31.0Luke Hoersten1-1/+1
2026-05-26Bind lnd restlisten to LAN interface instead of loopbackLuke Hoersten1-1/+1
Nginx reverse proxy on btc.nth.io runs on a separate host from lnd, so 127.0.0.1 binding broke cross-host proxying (502 Bad Gateway). Bind to default_ipv4 to keep REST off other interfaces while still reachable from the proxy host.
2026-04-25Standardize lnurld build to versioned .tar.gz artifactLuke Hoersten4-13/+17
- Use git short hash as version (0bf1955) - Add lnurld_version to server role defaults - Switch server install to unarchive - Add lnurld_srv_dir variable
2026-04-05Harden bitcoind and lnd: file permissions, service binding, no_logLuke Hoersten3-4/+6
- Config files 0644 -> 0600 - Add no_log: true to config tasks - Bind lnd rpclisten and restlisten to 127.0.0.1
2026-03-27Reverted rev of bitcoind.Luke Hoersten1-1/+1
2026-03-27version bumps.Luke Hoersten3-3/+3
2026-03-23Fixed loggingLuke Hoersten5-5/+1
2025-09-01Performance tweaks.Luke Hoersten2-2/+5
2025-08-03Lots of performance updates and added some flags for reindexing etc. Also ↵Luke Hoersten4-7/+16
added zram comporession.
2025-05-28Simplified wallet disabling.Luke Hoersten2-6/+2
2025-05-28Added filter index config.Luke Hoersten2-0/+2
2025-05-28Minor config updates.Luke Hoersten2-1/+9
2025-05-28Enabled the default wallet for wallet based queries on rpc.Luke Hoersten3-3/+9
2024-10-07Added hacks to fix lnd bitcoind 28 bug.Luke Hoersten2-1/+2
2024-10-07Version updatesLuke Hoersten3-3/+3
2024-07-29Version update.Luke Hoersten2-2/+2
2024-02-12Version updatesLuke Hoersten1-1/+1
2024-01-16Version updates.Luke Hoersten3-3/+11
2023-09-15Moved lnurld from my general ansible roles repo to the btc specific repo.Luke Hoersten7-0/+141
2023-07-19Version updates.Luke Hoersten3-2/+3
2023-04-03Updated lnd version.Luke Hoersten2-1/+3
2023-02-23lndcli was renamed to lncli.Luke Hoersten1-1/+1
2023-01-08Updated bitcoind and lnd versions and added a lnd hex macaroon script for Zeus.Luke Hoersten4-6/+18
2022-11-06Version updatesLuke Hoersten1-6/+6
2022-09-05Added REST api and cleaned up service unit file.Luke Hoersten2-0/+12
2022-08-08Added notify type to lnd service per docs.Luke Hoersten1-0/+1
2022-07-02Version updatesLuke Hoersten1-1/+1
2022-05-23Update versionsLuke Hoersten3-4/+4
2021-12-12Updated versions.Luke Hoersten4-4/+4
2021-07-24Updated version: bitcoind and lndLuke Hoersten2-2/+2
2021-07-05Added lnd channel backup to s3 role.Luke Hoersten5-0/+56
2021-04-25Version bump lnd.Luke Hoersten1-2/+2
2021-02-16Updated bitcoind and lnd.Luke Hoersten2-2/+2
2020-11-07Fixed lnd handlers.Luke Hoersten1-0/+0
2020-11-07Bumped dbcache sizeLuke Hoersten1-1/+2
2020-11-02Updated to lnd 0.11.1.Luke Hoersten1-1/+1
2020-08-30Update to bitcoind 0.20.1 and lnd 0.11.0Luke Hoersten2-2/+2
2020-08-02Added readmeLuke Hoersten1-0/+5
2020-06-30Added Bitnomial copyright.Luke Hoersten1-0/+29
2020-06-07Updated bitcoind and lnd.Luke Hoersten5-14/+15
2020-05-16Added bitcoind-prometheus-exporter role.Luke Hoersten6-10/+84
2020-05-14rpi optimizations were causing problems.Luke Hoersten1-7/+0
2020-05-12Added mdunnio rpi optimizations.Luke Hoersten1-1/+10