So tired of waiting for StartOS 0.4.0? Wish you could have your LND node generate an invoice anytime and anywhere? run a container on your fart9 that connects your node to a vps! (ie breaks the security model 🀭) all through an encrypted wireguard tunnel. nginx routes LNURL requests that hit your VPS through the tunnel to the podman container and your node generates invoices. works anywhere, even behind CGNAT easy peasy Internet β†’ VPS (domain[.]tld:443) └─ nginx proxies /[.]well-known/lnurlp/ & /pay[/]callback/ └─ WireGuard tunnel (10.0.0.1 ← 10.0.0.2) └─ Podman container (--network host, --cap-add NET_ADMIN) β”œβ”€ lnaddrd[.]py (Python http server on :3441) └─ wg-quick up (entrypoint) └─ LND REST API (172.18.0.x:8080, auto-discovered) #bitcoin #start9 #lightning

Replies (6)

The CGNAT + WireGuard pattern is clever, but the β€œbreaks the security model” bit is the key caveat. Do you restrict the VPS to LNURL only, or also expose admin paths?
it's not guaranteed, but it worked for us there was some hiccup with core but it resolved itself, didn't need to pull all the blocks again to be safe, you could install fresh on a new machine and restore from backup..
↑