Lightning Node question:

I want to use TOR only and not my domain name. lncli can't use the default generated TLS certs which means that Lightning Terminal does not connect.

What do?

#asknostr

Reply to this note

Please Login to reply.

Discussion

To connect to my node from my phone, I use Orbot as Tor proxy + juiceSSH as terminal.

If I need to access from my laptop I use linux+torify+ssh.

You need to set up a tor ssh hidden service on the node first.

Hope that helps... and Gm by the way☕️

Good Morning!

Ty.

Lightning Terminal is another app used to open channels on lightning.

It requires tls certs to connect to LND.

Do I need Lightning Terminal ?

My lightning node was setup with lnd.poster.place I just want it to use TOR only.

I access Lightning Terminal locally on my node (https-//localhost:8443/home) to setup Lightning Node Connect passphrases for use on my phone, laptop & node itself. I then use https-//terminal.lightning.engineering/ that connects to my Tor-only node to open/close channels and update fees to optimize routing. You could also setup a Tor hidden service for https-//localhost:8443/ to access it remotely if you need to create more passphrases while away from your node☕

I think that the connections from the node to terminal.lightning.engineerig are in clear net, exposing your IP to lightning.engineering at least. Also, to whoever is watching your traffic is clear that you're running a node.

Is there a way to avoid that?

Possibly so... The best solution then imo would be to run RTL instead (Ride The Lightning) via a Tor hidden service if you don't like lncli. You'd also want to open your channels in private mode using only taproot addresses but I haven't reached that level (of paranoia) yet🐸

also, lncli does not even work without tls certs

You can add your onion address to the tls cert

There's an option in lnd.conf for additional domain names in the cert.

It's tlsextradomain

Ty so much for the heads up. Sent you a small test zap

Looks like LND is on Tor only now and no need for the old ssl certs

Test worked, got 50 SATs. Thanks