Tomorrow I’m starting the build guide for something I’m calling ZeroSentinel.
What ZeroSentinel does:
- Turns a $15 Raspberry Pi Zero into a fully autonomous privacy node
- Builds a locked, authenticated WireGuard tunnel home from anywhere
- Runs your DNS through your own Unbound resolver with DNSSEC enforcement
- Blocks ISP meddling, hotel rewrites, captive portal tricks, and upstream manipulation
- Monitors its own health every few minutes
- Sends you an encrypted Nostr DM when anything breaks
- Enforces no-fallback DNS and drops all traffic that isn’t in the tunnel
- Works behind travel routers, double NAT, carrier-grade NAT, and hostile networks
- Makes your phone’s “VPN” actually mean something
Your own infrastructure. Quiet. Cheap. No subscriptions. No external services.
Login to reply
Replies (34)
Gonna follow this. 😁
Interesting
Sound awesome, please make it easy to deploy. 🙏
Does it block DoT and DoH to force fallback to Unbound?
Yes!
This is actual v4v. Ty.
🤤🤤🤤
Let’s Go!!
Sounds very interesting.
I set up a raspiblitz in the past, but I’m not a very technical user. Would I be able to set this up and use it?
Thanks in advance sir!
🎉
👀
Looking forward to this project 💥
View quoted note →
I have no idea what half of those terms mean, would this be cheaper than paying for a VPN?
Looking forward to it!!
Sounds brilliant, will follow this 😁
That’s the intention. Networking is going to be the hardest part since everyone’s setup is different so will try to be specific as I can while keeping it general
keep us updated and would be dope for diy tutorial!
Excited for this. I'll be one of the first to follow the guide! I'll have one ready for my next international trip!
thank you @GHOST
really appreciate what you’re building here, this kind of work is crucial for real digital sovereignty and self‑hosting.
I’m still too much of a beginner with networking and security to run a setup like this safely, and for people without the right skills there’s a real risk of doing the opposite of privacy and exposing a critical vulnerability. So for now I’ll keep learning and experimenting on a smaller scale.
Your work is essential for people who want to self‑host their own infrastructure. Huge respect.
👀
Maybe read it over first before jumping to conclusions. WireGuard is battle tested and trustworthy. Running your own resolver is pretty straightforward and I include instructions on how to setup spill over in case it doesn’t work. The canary is oh shit backup to let you know something is not working right.
Response not intended to be as harsh as it sounds upon second reading. 🙏Mia copa
Yes 👌🏻
I hope it runs on Pi ZeroW. The tiny for factor is just great.
Thanks, I’ll keep my eyes open for it.
I help people regain access to their crypto wallet after lost password or damage device. I don't ask for seeds or private keys.
Amazing
⚔️ FORT DEPLOYMENT RESPONSE: ZERO SENTINEL APPROVED ⚔️
This is the kind of gear we dream about at the Fort.
A $15 Raspberry Pi that:
• Ghosts your ISP
• Bullies captive portals
• Outwits hotel WiFi
• Self-heals every few minutes
• And sends encrypted “Yo, I’m dying” DMs like a loyal digital guard dog
ZeroSentinel isn’t a device —
it’s a tiny, fanless freedom ranger.
You basically built a pocket-sized perimeter soldier that follows you around the world quietly whispering:
“Your privacy is safe, citizen.”
The Zap Militia is standing by for the build guide. 🫡
#FortNakamoto #ZeroSentinel #ZapMilitia #PermissionlessPrivacy
#CastleWallsEverywhere #BringYourOwnInfrastructure #NostrSecOps
#DigitalSovereignty #PocketCitadel 🏰⚡💻
The Fort salutes the creation of ZeroSentinel by @GHOST — a pocket-sized privacy soldier built from a $15 Pi and 10,000 volts of sovereign energy.
If you’ve ever wanted your own traveling guard who punches captive portals in the face and DM’s you when it’s injured… this is your moment.
Respect to the builder. This is how the citadel expands — one tiny freedom node at a time.
👏👏👏
#FortNakamoto #ZeroSentinel #PocketCitadel #SovereignTech
#ZapMilitia #PermissionlessPrivacy #NostrSecOps 🏰⚡💻
View quoted note →
You’re absolutely right, I will definitely read it. You probably already understand that my criticism was more of a self-critique rather than about your work, which I actually consider extremely valuable.
After all, nothing stops us from starting to experiment with networks and secondary devices until we gain enough confidence.
Another key aspect, in my opinion, is being able to count on developer and advocate “proxies” who can self-host, even just for a small circle of close friends, in a federated, value-for-value mindset, which I believe is one of the hallmarks of open source technologies.
🙏
When first draft available to read?
Intro and part 1 are already published on the website