secure-node: stop pruning liquidd

There is no security reason why pruning should be enabled and therefore it
surprises users. Turning on pruning in the first place was simply a mistake.
This commit is contained in:
Jonas Nick 2021-10-31 10:45:06 +00:00
parent 347a0f3aee
commit bac8518e7c
No known key found for this signature in database
GPG Key ID: 4861DBF262123605
3 changed files with 18 additions and 2 deletions

View File

@ -259,5 +259,5 @@
# The nix-bitcoin release version that your config is compatible with. # The nix-bitcoin release version that your config is compatible with.
# When upgrading to a backwards-incompatible release, nix-bitcoin will display an # When upgrading to a backwards-incompatible release, nix-bitcoin will display an
# an error and provide hints for migrating your config to the new release. # an error and provide hints for migrating your config to the new release.
nix-bitcoin.configVersion = "0.0.53"; nix-bitcoin.configVersion = "0.0.57";
} }

View File

@ -44,7 +44,9 @@ in {
}; };
services.liquidd = { services.liquidd = {
prune = 1000; # Enable `validatepegin` to verify that a transaction sending BTC into
# Liquid exists on Bitcoin. Without it, a malicious liquid federation can
# make the node accept a sidechain that is not fully backed.
validatepegin = true; validatepegin = true;
listen = true; listen = true;
}; };

View File

@ -169,6 +169,20 @@ let
This includes the final database size (0.4) plus some extra storage (0.2). This includes the final database size (0.4) plus some extra storage (0.2).
''; '';
} }
{
version = "0.0.57";
condition = config.nix-bitcoin ? secure-node-preset-enabled && config.services.liquidd.enable;
message = ''
The `secure-node.nix` preset does _not_ set `liquidd.prune = 1000` anymore.
- If you want to keep the same behavior as before, manually set
`services.liquidd.prune = 1000;` in your configuration.nix.
- Otherwise, if you want to turn off pruning, you must instruct liquidd
to reindex by setting `services.liquidd.extraConfig = "reindex=1";`.
This can be removed after having started liquidd with that option
once.
'';
}
]; ];
mkOnionServiceChange = service: { mkOnionServiceChange = service: {