Nostr Web Client

content warning: extremely nerdy tech demo. if you ever wondered how zaps work behind the scenes and how self-custodial zaps work, check out this demo of my new lnurl-commando server!

https://damus.io/media/hls/lnurl-commando-demo/master.m3u8

Anon 5mo ago 💬 2

Love this kind of nerdy stuff. I’ve been looking for a way to expose LNUrl API to the outside world and have it transparently instruct my LND server to create invoices.

Alby works, but for a number of reasons I don’t really trust those guys. And BTCPay seems like overkill. Perhaps this is what I’m looking for.

I always take extra care to anonymize the IP address of my server(s), both the LNUrl endpoint and the LND node itself. The way I personally handle that is:

I lease the cloud server with Bitcoin (as opposed to credit card) and connect to it only over an anonymizing, persistent, OpenVPN connection. From there, I can forward traffic destined for the LNUrl and/or LND endpoints from the cloud server to my home server using NGINX or simple port forwarding without exposing my home IP address. It’ll just cross over the tunnel so there’s no direct connection between my cloud and home servers.

Reply to this note

Please Login to reply.

Discussion

jb55 5mo ago 💬 1

yeah this is just a much simpler way without needing lots of extra software and web servers. if your lightning node is already hosting a port at home why not just use that for fetching?

unfortunately lnd does not currently support commando (custom rpc over lightning), but they should

Anon 5mo ago

I’m kind of new to LND and Linux in general, so some of my paranoid design decisions are probably built on faulty logic.

But my line of reasoning at the time was….

I want to keep all my Bitcoin stuff as physically close to me as possible, so stuff like bitcoin core, electrum server, and LND live on the home servers. But for stuff that requires inbound connections that expose my IP, like LNUrl or even just receiving money over LN when supplying an invoice, I want to keep those open ports as *far away* from me as possible. That’s when I came up with using port forwarding over a OpenVPN tunnel (using Proton as anonymizer). Probably not the most efficient way to do it but was a fun learning exercise.

arbadacarba 4mo ago 💬 1

From cloud to @lnbits on Phoenixd at home maybe? It's not an overkill and does exactly that (and so much more with it's load of optional extensions 😅)

https://github.com/arbadacarbaYK/LNbits.on.phoenixd.on.MacOS/blob/main/Debian.md

Swagger https://demo.lnbits.com/docs

Anon 4mo ago

Oh wow, didn’t realize that product even existed. Looks like what I need. Thanks for that!