From f2f3906b8e9f1af99de9cf6488d54732a711dfc6 Mon Sep 17 00:00:00 2001 From: Luke Hoersten Date: Sun, 5 Apr 2026 20:19:40 -0500 Subject: Harden bitcoind and lnd: file permissions, service binding, no_log - Config files 0644 -> 0600 - Add no_log: true to config tasks - Bind lnd rpclisten and restlisten to 127.0.0.1 --- lnd/templates/lnd.conf.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'lnd/templates/lnd.conf.j2') diff --git a/lnd/templates/lnd.conf.j2 b/lnd/templates/lnd.conf.j2 index ba37102..60fec71 100644 --- a/lnd/templates/lnd.conf.j2 +++ b/lnd/templates/lnd.conf.j2 @@ -8,8 +8,8 @@ alias={{lnd_alias}} tlsextradomain={{lnd_alias}} listen=0.0.0.0:9735 -rpclisten=0.0.0.0:10009 -restlisten=0.0.0.0:8080 +rpclisten=127.0.0.1:10009 +restlisten=127.0.0.1:8080 [Bitcoin] bitcoin.mainnet=true -- cgit v1.2.3