| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
lnurld/server's copy of lnurld_version mirrors lnurld/build's rather than
pinning an independent upstream check, same pattern as ansible-roles'
bin/server, dendrite/server, and pleroma/otp. Point it at the build
role's file instead of a URL; documented in the README. Also fixes the
README's lnd_version example, stale since the 0.21.4-beta bump.
|
|
Bump lnd 0.20.2-beta -> 0.21.4-beta, a full published release, and update
lnd_sha256 (arm64, amd64) from the signed manifest-v0.21.4-beta.txt on the
github release page. Manifest content pulled over https from the official
release page; gpg signature verification was not possible in this
environment (keyserver lookup blocked), so verify a manifest-*.sig before
deploying to a wallet-holding node.
Bump lnurld 0bf1955 -> b62791f (current master), keeping lnurld/build and
lnurld/server in sync. Picks up 14 commits including a switch to bcrypt
for password storage and replay protection on LN auth requests.
bitcoind stays at 31.1: the v32.0 tag has no backing release yet, only
test.rc2-rc4 builds are published at bitcoincore.org. lndconnect stays at
0.2.0: v0.2.1 is a prerelease source tag with no binary assets.
|
|
Reword and reposition the lookup comment above each upstream _version
var to a single greppable "# version-check: <url>" marker, matching the
convention adopted in ansible-roles: always directly above the version
line, one grep finds every instance.
Covers bitcoind, bitcoind-prometheus-exporter, lnd (lnd_version and
lndconnect_version, the latter had no lookup comment before), and
lnurld/build, which points at the upstream commits page since
lnurld_version pins a commit hash rather than a release tag.
Document the convention in the README.
|
|
Add bitcoind_natpmp (default on, matching Core 28+); upnp dropped since the
official binaries ship without miniupnpc. Bump bitcoind 31.0 -> 31.1 and lnd
0.20.x -> 0.20.2-beta, with sha256 hashes updated from the signed bitcoin
SHA256SUMS and the lnd release manifest.
|
|
The pinned golang-1.21-go was a noble leftover; the hand symlink
shadowed the real go on 26.04.
|
|
lnd sums come from the signed release manifest. lndconnect publishes
no checksums, so its pin is the tarball hash cross-checked against the
binary in production since 2020.
|
|
Pinned per arch from the official SHA256SUMS; download and unarchive
are split so nothing extracts unless the tarball matches. Update the
pins when bumping bitcoind_version.
|
|
The exporter reads rpc credentials from bitcoin.conf but the bitcoind
role writes it 0600 bitcoin:bitcoin, so the prometheus user could
never read it (only long-lived processes predating the tightened mode
kept working). Make the conf group-readable and add prometheus to the
bitcoin group.
|
|
- order after network-online: rpcbind fails with getaddrinfo errors
when bitcoind starts before addresses are configured
- restart on failure so a transient bad start heals itself
- 30min stop timeout: the chainstate flush can far exceed systemd's
90s default, and a SIGKILL there risks a slow replay or a reindex
|
|
Create the work dir and set GOPATH/GOCACHE/GOMODCACHE on the build task, so the
role is self-contained rather than relying on the playbook's environment.
|
|
community.general.archive (>=10) compresses a lone file into a bare .gz instead
of a tarball, which the server can't unarchive. Set force_archive: true.
|
|
|
|
|
|
Nginx reverse proxy on btc.nth.io runs on a separate host from lnd,
so 127.0.0.1 binding broke cross-host proxying (502 Bad Gateway).
Bind to default_ipv4 to keep REST off other interfaces while still
reachable from the proxy host.
|
|
- Use git short hash as version (0bf1955)
- Add lnurld_version to server role defaults
- Switch server install to unarchive
- Add lnurld_srv_dir variable
|
|
- Config files 0644 -> 0600
- Add no_log: true to config tasks
- Bind lnd rpclisten and restlisten to 127.0.0.1
|
|
|
|
|
|
|
|
|
|
added zram comporession.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
