Nostr Web Client

it's a bit tricky because you have to unlock it when it boots, so if it crashes it is DOWN. so really you have to then have two or three of them to ensure high availability. and actually you don't need to encrypt the whole disk, just the /var and /home which you can do using disk-files. i have no idea what options there are for making this work but a simple script with SSH so on your secure machines, accessible by the top level admins of your org, can just run the script and it does the dance for you.

so, it's not simple to set up, and you have to have round the clock admins to alert and have them unlock the thing if it ded

ᴛʜᴇ ᴅᴇᴀᴛʜ ᴏꜰ ᴍʟᴇᴋᴜ 4mo ago

note that you could theoretically have that thing automatically unlock with a failover script that polls the server, but i wouldn't want to run a production site without two of these signer machines at two different locations and 3 failovers, with all of them maintaining sync with each other somehow.

so, for nostr that would also mean needing a relay sync spider on each that keeps up to date with other nodes, probably a push sync on the other direction, and then you also have to deal with the lightning node, which has all the same kinds of issues to manage. probably a pair of alby hubs with connections through the relays on all three server machines and an automated failover/unlock script on the two unlocker machines.

Reply to this note

Please Login to reply.

Discussion

No replies yet.