Nostr Web Client

im guessing then since you just moved that the node may not be getting an IP address. wired? wifi? do you own the internet in your new place? same modem and router as before? new stuff?

B.O.P 2y ago

This happened to me too when I moved and got a new router. If green then it is connected to the new network. Since your IP isn’t the same you need to download “angry IP”, find your node on the list of connected devices and then right click and “open in browser”. This will then allow you to get an onion address and set your umbrel.local to the correct IP.

PRO TIP

DOWNLOAD Tailscale from the umbrel store and Tailscale on your phone so you can set a static IP and you’ll be able to remotely access your node from your phone. For privacy purposes when making an account for Tailscale use a burner email address not linked to your phone number.

Hope this helps!

Reply to this note

Please Login to reply.

Discussion

alanajoy 2y ago

Thank you, tried angry IP and the node isn’t on there 🥺

B.O.P 2y ago

Strange.. you scrolled through everything to find it? It should show up if you’re on the same network as the node when using Angry IP. If it’s not showing up after double checking those things I’m thinking it could be a bad connection with a Ethernet cable.

B.O.P 2y ago

You can also filter by color if you click the column. That may help you track it down

B.O.P 2y ago

Also I’m not sure if your browser is caching old data from your previous IP when you go Umbrel.local. You can try deleting browser history with cached data

B.O.P 2y ago

If angry IP doesn’t work I would maybe try this :

#[5]

Giuliano 2y ago

Ive had issues since getting a new router. On angry ip i right clicked my node to open in browser but nothing loads. Any ideas on next steps?

B.O.P 2y ago

Hmmm

B.O.P 2y ago

Are you getting any screen at all?

Giuliano 2y ago

No nothing comes up but i see its trying to load

B.O.P 2y ago

clear your browser history including cached data. Then try umbrel.local. If that doesn’t work I’d restart everything, phone and node try it all again

B.O.P 2y ago

Phone or computer (however you’re interfacing)

Giuliano 2y ago

How do i restart node? Just unplug it?

B.O.P 2y ago

Try just restarting your computer and unplugging the node from the router first. I don’t want to mess it up by improperly shutting down. Make sure you delete your browser history too and try Umbrel.local before you do any restarting. I really think that should work

Giuliano 2y ago

I followed everything and nothing happened so i unplugged the node and IT WORKED!! THANK YOU MY FRIEND

B.O.P 2y ago

🙏🙏🙏 so glad. Let me know if you need any other help

B.O.P 2y ago

#[4] needs to default to static IP this is wild that this happens to so many people

Michael Anton Fischer 2y ago

People need to stop using Umbrel. It’s a closed private server with a little bit of node function in between the gaping security holes.

B.O.P 2y ago

I don’t fully disagree but it’s a work in progress and is the best node software for beginners with the best UI IMO. Just has some kinks

Michael Anton Fischer 2y ago

No. Raspiblitz and Citadel are much better. Since 0.5 Umbrel is a mess where you can even accidentally delete LND and lose funds.

Everything about it runs counter to the spirit of Bitcoin.

Giuliano 2y ago

Whats the best way to run a node in your opinion? I have been thinking about leaving umbrel. Running bitcoin core on a separate laptop?

Michael Anton Fischer 2y ago

If you run in the home, use Raspiblitz or Citadel as a beginner.

Try Raspibolt if you want to understand what your node does.

alanajoy 2y ago

I’m going to look into both of these, to learn if nothing else

Purple Horse 2y ago

Your thoughts please #[4]

B.O.P 2y ago

Check out the umbrel telegram group too. Don’t trust anybody that DMs you saying they are “Umbrel support” https://t.me/getumbrel

Michael Anton Fischer 2y ago

Why are you looking for their opinion? They made a deliberate decision to leave the path of FOSS.

alanajoy 2y ago

As an umbrel user I’d love to hear how they reply to this concern, that’s how we learn

Purple Horse 2y ago

This ☝️

Michael Anton Fischer 2y ago

I and many others have been in conversation with them ever since they moved of the FOSS path.

In the end the frustration about their poor choices is how RunCitadel came into being.

B.O.P 2y ago

You make me wanna go buy another raspberry pi and start going down the FOSS node rabbit hole

Purple Horse 2y ago

Same

Michael Anton Fischer 2y ago

Or buy a used Lenovo. Better performance, lower cost and no sd card that can fail.

Also you can get a V40 Server at Strato for 9€ a month, buy a domain name and play with clearnet.

https://www.strato.de/server/linux-vserver/

Here is a guide how to do it. Security needs to be improved, still better than running Umbrel, which is basically hackable by everybody on the same LAN.

https://github.com/Opago-Pay/OpagoNode

B.O.P 2y ago

If you have a password and 2FA on your umbrel it makes it a little better but you’re right..

Thanks for the tips here I’m going to save your note. I may just buy a used laptop like you said and try that.

Michael Anton Fischer 2y ago

No it doesn’t. At least it didn’t when I last checked. All important ports are exposed on the host, even the Tor control port was accessible when I last checked.

Michael Anton Fischer 2y ago

In my Setup I closed all the ports to direct access besides Lightning and that only because currently for a not yet clear to me reason the caddy reverse proxy and LND didn’t play nicely.

Michael Anton Fischer 2y ago

You can control Lightning only if you have ssh access (Raspibolt has a guide how to secure ssh access) or via thunderhub, which is pretty secure and has 2FA option as well.

Sikto 2y ago

I’m a start9 fanboy and flashed eOS and loaded it onto a refurbished Lenovo tiny. It’s been running with no issues and their customer service is top notch.

B.O.P 2y ago

Those look cool seen btcsessions talk about them but never tried one though

Sikto 2y ago

You don’t have to buy their hardware or use a pi. Their operating system will work on any x86 architecture and its free and open source. I paid less for my refurbished Lenovo, with 1tb ssd of storage and 16gb of ram tan it would have cost me for a way less capable pi.

B.O.P 2y ago

Nice I’ll save this note too.

Sikto 2y ago

Cool! Let me know if you have any questions.

Michael Anton Fischer 2y ago

Never looked into them deeply. They are more transparent than Umbrel, but they also use the expose command in Dockerfiles.

I am at a point where this is for my use, I will discard it.

So crazy that probably 90% of docker containers have ports exposed by default.

A mystery why you’d do that unless it is a port meant to be open to the internet, which most ports aren’t.

You can always open a port in compose or when running the container, if needed. But just opening all ports to the host is crazy, especially if maybe someone else may use your container.

Sikto 2y ago

Sorry, this is beyond my breadth of knowledge. Could you elaborate? I’d love to know what you mean, on a more basic level. Ie what’s the risk, and what’s the tradeoff? Thanks!

Michael Anton Fischer 2y ago

If you expose a port in a docker container, it is open on the host.

If the port is eg 80 for a Webserver that’s fine.

If it’s a control port port then that’s asking for trouble.

Many container projects used to open all ports the application uses, for convenience of newbies, so they can just say “docker run container” without any options.

The usual purpose for containers is to be deployed via compose, swarm or Kubernetes, which can open all the ports.

As I mentioned docker can overwrite firewall rules.

I had cases of finding a port open to the internet even though my compose had port specifications that didn’t include it and the port was blocked in ufw.

So the best practice is to never use expose in a Dockerfile, use the deployment to handle the port openings and in general keep as much of the ports closed.

Docker has internal Networking between containers and reverse Proxies are also usually a better option for routing traffic from the web to your container.

Sikto 2y ago

Thanks!

B.O.P 2y ago

That’s very concerning

B.O.P 2y ago

See someone like me that learns as I go wouldn’t know to check that

Michael Anton Fischer 2y ago

I got blocked by Darth Bitcoin for pointing this out.

He said „just install ufw” which is important, but since docker overwrites the firewall rules, it is not enough.

B.O.P 2y ago

I have a not so small lightning node running and makes me a little nervous after hearing this about the amount of funds I have on there. Do you have any kind of step by step process to make sure these ports are closed except lightning for an amateur like me? Going to use that as a bandaid until I get my upgraded new foss node running

Michael Anton Fischer 2y ago

Not with Umbrel. You’d need to rebuild the docker containers and since 0.5 they redid everything.

There is no documentation and no Dockerfiles that I can find.

You could achieve partial improvements by changing the docker-compose.yml

But if you run a big node in the home, I’d use Rasbibolt and definitely not on a RaspberriePi.

I am currently working on a guide for running a node redundantly on more than one computer.

B.O.P 2y ago

Thanks for all your tips. Clearly I’m just a pleb, I never studied computer science or anything like that but did in other technical fields. Just building the technical computer knowledge takes a while but you definitely helped filled in some gaps. Cheers!

B.O.P 2y ago

I’ll check those out I’m looking to run another node soon

tigs 2y ago

Just whitelist the MAC address in your router and give it a static IP that way if you can?