mirror of
https://github.com/fort-nix/nix-bitcoin.git
synced 2024-11-26 16:18:52 +03:00
2a240d6f4a
In case of btcpayserver the default onion service is a security risk because any visitor can register an admin account on a freshly setup node.
34 lines
881 B
Nix
34 lines
881 B
Nix
{ lib, ... }:
|
|
let
|
|
defaultTrue = lib.mkDefault true;
|
|
in {
|
|
services.tor = {
|
|
enable = true;
|
|
client.enable = true;
|
|
};
|
|
|
|
# Use Tor for all outgoing connections
|
|
services = {
|
|
bitcoind.enforceTor = true;
|
|
clightning.enforceTor = true;
|
|
lnd.enforceTor = true;
|
|
lightning-loop.enforceTor = true;
|
|
liquidd.enforceTor = true;
|
|
electrs.enforceTor = true;
|
|
# disable Tor enforcement until btcpayserver can fetch rates over Tor
|
|
# btcpayserver.enforceTor = true;
|
|
nbxplorer.enforceTor = true;
|
|
spark-wallet.enforceTor = true;
|
|
recurring-donations.enforceTor = true;
|
|
nix-bitcoin-webindex.enforceTor = true;
|
|
};
|
|
|
|
# Add onion services for incoming connections
|
|
nix-bitcoin.onionServices = {
|
|
bitcoind.enable = defaultTrue;
|
|
liquidd.enable = defaultTrue;
|
|
electrs.enable = defaultTrue;
|
|
spark-wallet.enable = defaultTrue;
|
|
};
|
|
}
|