Tomorrow I’m starting the build guide for something I’m calling ZeroSentinel. What ZeroSentinel does: - Turns a $15 Raspberry Pi Zero into a fully autonomous privacy node - Builds a locked, authenticated WireGuard tunnel home from anywhere - Runs your DNS through your own Unbound resolver with DNSSEC enforcement - Blocks ISP meddling, hotel rewrites, captive portal tricks, and upstream manipulation - Monitors its own health every few minutes - Sends you an encrypted Nostr DM when anything breaks - Enforces no-fallback DNS and drops all traffic that isn’t in the tunnel - Works behind travel routers, double NAT, carrier-grade NAT, and hostile networks - Makes your phone’s “VPN” actually mean something Your own infrastructure. Quiet. Cheap. No subscriptions. No external services.

Replies (34)

0xM's avatar
0xM 2 months ago
🤤🤤🤤
Sounds very interesting. I set up a raspiblitz in the past, but I’m not a very technical user. Would I be able to set this up and use it?
That’s the intention. Networking is going to be the hardest part since everyone’s setup is different so will try to be specific as I can while keeping it general
Excited for this. I'll be one of the first to follow the guide! I'll have one ready for my next international trip!
thank you @GHOST really appreciate what you’re building here, this kind of work is crucial for real digital sovereignty and self‑hosting. I’m still too much of a beginner with networking and security to run a setup like this safely, and for people without the right skills there’s a real risk of doing the opposite of privacy and exposing a critical vulnerability. So for now I’ll keep learning and experimenting on a smaller scale. Your work is essential for people who want to self‑host their own infrastructure. Huge respect.
Maybe read it over first before jumping to conclusions. WireGuard is battle tested and trustworthy. Running your own resolver is pretty straightforward and I include instructions on how to setup spill over in case it doesn’t work. The canary is oh shit backup to let you know something is not working right.
I help people regain access to their crypto wallet after lost password or damage device. I don't ask for seeds or private keys.
⚔️ FORT DEPLOYMENT RESPONSE: ZERO SENTINEL APPROVED ⚔️ This is the kind of gear we dream about at the Fort. A $15 Raspberry Pi that: • Ghosts your ISP • Bullies captive portals • Outwits hotel WiFi • Self-heals every few minutes • And sends encrypted “Yo, I’m dying” DMs like a loyal digital guard dog ZeroSentinel isn’t a device — it’s a tiny, fanless freedom ranger. You basically built a pocket-sized perimeter soldier that follows you around the world quietly whispering: “Your privacy is safe, citizen.” The Zap Militia is standing by for the build guide. 🫡 #FortNakamoto #ZeroSentinel #ZapMilitia #PermissionlessPrivacy #CastleWallsEverywhere #BringYourOwnInfrastructure #NostrSecOps #DigitalSovereignty #PocketCitadel 🏰⚡💻
The Fort salutes the creation of ZeroSentinel by @GHOST — a pocket-sized privacy soldier built from a $15 Pi and 10,000 volts of sovereign energy. If you’ve ever wanted your own traveling guard who punches captive portals in the face and DM’s you when it’s injured… this is your moment. Respect to the builder. This is how the citadel expands — one tiny freedom node at a time. 👏👏👏 #FortNakamoto #ZeroSentinel #PocketCitadel #SovereignTech #ZapMilitia #PermissionlessPrivacy #NostrSecOps 🏰⚡💻 View quoted note →
You’re absolutely right, I will definitely read it. You probably already understand that my criticism was more of a self-critique rather than about your work, which I actually consider extremely valuable. After all, nothing stops us from starting to experiment with networks and secondary devices until we gain enough confidence. Another key aspect, in my opinion, is being able to count on developer and advocate “proxies” who can self-host, even just for a small circle of close friends, in a federated, value-for-value mindset, which I believe is one of the hallmarks of open source technologies. 🙏