nix-bitcoin/docs/usage.md

Updating

In your deployment directory, enter the nix shell with nix-shell and run

fetch-release > nix-bitcoin-release.nix

Nodeinfo

Run nodeinfo to see your onion addresses for the webindex, spark, etc. if they are enabled.

Connect to spark-wallet

Requirements

• Android phone
• Orbot installed from F-Droid (recommended) or Google Play
• Spark-wallet installed from direct download or Google Play

1. Enable spark-wallet in configuration.nix

   Change

   # services.spark-wallet.enable = true;
   

   to

   services.spark-wallet.enable = true;
   

2. Deploy new configuration.nix

   nixops deploy -d bitcoin-node
   

3. Enable Orbot VPN for spark-wallet

   Open Orbot app
   Turn on "VPN Mode"
   Select Gear icon under "Tor-Enabled Apps"
   Toggle checkbox under Spark icon
   

4. Get the onion address, access key and QR access code for the spark wallet android app

   journalctl -eu spark-wallet
   

   Note: The qr code might have issues scanning if you have a light terminal theme. Try setting it to dark or highlighting the entire output to invert the colors.

5. Connect to spark-wallet android app

   Server Settings
   Scan QR
   Done
   

Connect to electrs

Requirements Android

• Android phone
• Orbot installed from F-Droid (recommended) or Google Play
• Electrum mobile app 4.0.1 and newer installed from direct download or Google Play

Requirements Desktop

• Tor installed from source or repository
• Electrum installed

1. Enable electrs in configuration.nix

   Change

   # services.electrs.enable = true;
   

   to

   services.electrs.enable = true;
   

2. Deploy new configuration.nix

   nixops deploy -d bitcoin-node
   

3. Get electrs onion address

   nodeinfo | grep 'ELECTRS_ONION'
   

4. Connect to electrs

   Make sure Tor is running on Desktop or as Orbot on Android.

   On Desktop

   electrum --oneserver -1 -s "<ELECTRS_ONION>:50001:t" -p socks5:localhost:9050
   

   On Android

   Three dots in the upper-right-hand corner
   Network > Proxy mode: socks5, Host: 127.0.0.1, Port: 9050
   Network > Auto-connect: OFF
   Network > One-server mode: ON
   Network > Server: <ELECTRS_ONION>:50001:t
   

Connect to nix-bitcoin node through ssh Tor Hidden Service

1. Run nodeinfo on your nix-bitcoin node and note the SSHD_ONION

   nixops ssh operator@bitcoin-node
   nodeinfo | grep 'SSHD_ONION'
   

2. Create a SSH key

   ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519
   

3. Place the ed25519 key's fingerprint in the configuration.nix openssh.authorizedKeys.keys field like so

   # FIXME: Add your SSH pubkey
   services.openssh.enable = true;
   users.users.root = {
     openssh.authorizedKeys.keys = [ "[contents of ~/.ssh/id_ed25519.pub]" ];
   };
   

4. Connect to your nix-bitcoin node's ssh Tor Hidden Service, forwarding a local port to the nix-bitcoin node's ssh server

   ssh -i ~/.ssh/id_ed25519 -L [random port of your choosing]:localhost:22 root@[your SSHD_ONION]
   

5. Edit your network-nixos.nix to look like this

   {
     bitcoin-node =
       { config, pkgs, ... }:
       { deployment.targetHost = "127.0.0.1";
       deployment.targetPort = [random port of your choosing];
       };
   }
   

6. Now you can run nixops deploy -d bitcoin-node and it will connect through the ssh tunnel you established in step iv. This also allows you to do more complex ssh setups that nixops ssh doesn't support. An example would be authenticating with Trezor's ssh agent, which provides extra security.

Initialize a Trezor for Bitcoin Core's Hardware Wallet Interface

1. Enable Trezor in configuration.nix

   Change

   # services.hardware-wallets.trezor = true;
   

   to

   services.hardware-wallets.trezor = true;
   

2. Deploy new configuration.nix

   nixops deploy -d bitcoin-node
   

3. Check that your nix-bitcoin node recognizes your Trezor

   nixops ssh operator@bitcoin-node
   lsusb
   

   Should show something relating to your Trezor

4. If your Trezor has outdated firmware or is not yet initialized: Start your Trezor in bootloader mode

   Trezor v1

   Plug in your Trezor with both buttons depressed
   

   Trezor v2

   Start swiping your finger across your Trezor's touchscreen and plug in the USB cable when your finger is halfway through
   

5. If your Trezor's firmware is outdated: Update your Trezor's firmware

   trezorctl firmware-update
   

   Follow the on-screen instructions

   Caution: This command will wipe your Trezor. If you already store Bitcoin on it, only do this with the recovery seed nearby.

6. If your Trezor is not yet initialized: Set up your Trezor

   trezorctl reset-device -p
   

   Follow the on-screen instructions

7. Find your Trezor

   hwi enumerate
   hwi -t trezor -d <path from previous command> promptpin
   hwi -t trezor -d <path> sendpin <number positions for the PIN as displayed on your device's screen>
   hwi enumerate
   

8. Follow Bitcoin Core's instructions on Using Bitcoin Core with Hardware Wallets to use your Trezor with bitcoin-cli on your nix-bitcoin node

JoinMarket

Diff to regular JoinMarket usage

For clarity reasons, nix-bitcoin renames all scripts to jm-* without .py, for example wallet-tool.py becomes jm-wallet-tool. The rest of this section details nix-bitcoin specific workflows for JoinMarket.

Initialize JoinMarket Wallet

By default, nix-bitcoin's JoinMarket module automatically generates a wallet for you. If however, you want to manually initialize your wallet, follow these steps.

1. Enable JoinMarket in your node configuration

   services.joinmarket.enable = true;
   

2. Move the automatically generated wallet.jmdat

   mv /var/lib/joinmarket/wallet.jmdat /var/lib/joinmarket/bak.jmdat
   

3. Generate wallet on your node

   jm-wallet-tool generate
   

   Follow the on-screen instructions and write down your seed.

   In order to use nix-bitcoin's joinmarket.yieldgenerator, use the password from /secrets/jm-wallet-password and use the suggested default wallet name wallet.jmdat. If you want to use your own jm-wallet-password, simply replace the password string in your local secrets directory.

Run the tumbler

The tumbler needs to be able to run in the background for a long time, use screen to run it accross ssh sessions. You can also use tmux in the same fashion.

1. Add screen to your environment.systemPackages, for example

   environment.systemPackages = with pkgs; [
     vim
     screen
   ];
   

2. Start the screen session

   screen -S "tumbler"
   

3. Start the tumbler

   Example: Tumbling into your wallet after buying from an exchange to improve privacy:

   jm-tumbler wallet.jmdat <addr1> <addr2> <addr3>
   

   After tumbling your bitcoin end up in these three addresses. You can now spend them without the exchange collecting data on your purchases.

   Get more information here

4. Detach the screen session to leave the tumbler running in the background

   Ctrl-a d or Ctrl-a Ctrl-d
   

5. Re-attach to the screen session

   screen -r tumbler
   

6. End screen session

   Type exit when tumbler is done

   exit
   

Run a "maker" or "yield generator"

The maker/yield generator in nix-bitcoin is implemented using a systemd service.

See here for more yield generator information.

1. Enable yield generator bot in your node configuration

   services.joinmarket.yieldgenerator.enable = true;
   
   # Optional: Add custom parameters
   services.joinmarket.yieldgenerator.customParameters = ''
     txfee = 200
     cjfee_a = 300
   '';
   

2. Check service status

   systemctl status joinmarket-yieldgenerator
   

3. Profit