Updating --- Run `git pull` in the nix-bitcoin directory, enter the nix shell with `nix-shell` and redeploy with `nixops deploy -d bitcoin-node`. ## Verifying GPG Signatures (recommended) 1. Import jonasnick's gpg key ``` gpg2 --receive-key 36C71A37C9D988BDE82508D9B1A70E4F8DCD0366 ``` 2. Trust jonasnick's gpg key ``` gpg2 --edit-key 36C71A37C9D988BDE82508D9B1A70E4F8DCD0366 trust 4 quit ``` 3. Verify commit after `git pull` ``` git verify-commit ``` Nodeinfo --- Run `nodeinfo` to see your onion addresses for the webindex, spark, etc. if they are enabled. Connect to spark-wallet --- 1. Enable spark-wallet in `configuration.nix` Change ``` # services.spark-wallet.enable = true; ``` to ``` services.spark-wallet.enable = true; ``` 2. Deploy new `configuration.nix` ``` nixops deploy -d bitcoin-node ``` 3. Get the onion address, access key and QR access code for the spark wallet android app ``` journalctl -eu spark-wallet ``` Note: The qr code might have issues scanning if you have a light terminal theme. Try setting it to dark or highlightning the entire output to invert the colors. 4. Connect to spark-wallet android app ``` Server Settings Scan QR Done ``` Connect to electrs --- 1. Enable electrs in `configuration.nix` Change ``` # services.electrs.enable = true; ``` to ``` services.electrs.enable = true; ``` 2. Deploy new `configuration.nix` ``` nixops deploy -d bitcoin-node ``` 3. Get electrs onion address ``` nodeinfo | grep 'ELECTRS_ONION' ``` 4. Connect to electrs On electrum wallet machine ``` electrum --oneserver --server=:50001:t ``` Connect to nix-bitcoin node through ssh Tor Hidden Service --- 1. Run `nodeinfo` on your nix-bitcoin node and note the `SSHD_ONION` ``` nixops ssh operator@bitcoin-node nodeinfo | grep 'SSHD_ONION' ``` 2. Create a SSH key ``` ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519 ``` 3. Place the ed25519 key's fingerprint in the `configuration.nix` `openssh.authorizedKeys.keys` field like so ``` # FIXME: Add your SSH pubkey services.openssh.enable = true; users.users.root = { openssh.authorizedKeys.keys = [ "[contents of ~/.ssh/id_ed25519.pub]" ]; }; ``` 4. Connect to your nix-bitcoin node's ssh Tor Hidden Service, forwarding a local port to the nix-bitcoin node's ssh server ``` ssh -i ~/.ssh/id_ed25519 -L [random port of your choosing]:localhost:22 root@[your SSHD_ONION] ``` 5. Edit your `network-nixos.nix` to look like this ``` { bitcoin-node = { config, pkgs, ... }: { deployment.targetHost = "127.0.0.1"; deployment.targetPort = [random port of your choosing]; }; } ``` 6. Now you can run `nixops deploy -d bitcoin-node` and it will connect through the ssh tunnel you established in step iv. This also allows you to do more complex ssh setups that `nixops ssh` doesn't support. An example would be authenticating with [Trezor's ssh agent](https://github.com/romanz/trezor-agent), which provides extra security.