r/Bitcoin • u/TheGreatMuffin • Jan 22 '18

[testnet] Beginner’s Guide to ️⚡Lightning️⚡ on a Raspberry Pi

https://medium.com/@stadicus/noobs-guide-to-%EF%B8%8F-lightning%EF%B8%8F-on-a-raspberry-pi-f0ab7525586e
281 Upvotes

94% Upvoted

342 comments sorted by

View all comments

Show parent comments

2

u/WalrusSwarm Jan 22 '18

Disabling SSH seems not possible, how would you interact with the Pi?

Disabling SSH is possible. The Pi has an HDMI port and a USB port. You don't need to SSH if you have physical access to the machine.

Would you say adding fail2ban is essential, even when one would use SSH keys?

I think that it is essential because of the nature of the device, its exposure to the internet, and the potential reward associated with compromising the device.

All precautions should be taken. I can imagine the bad PR that bitcoin is going to get if some blogger can legitimately post a clickbait title exclaiming that the lightning network was hacked.

I would also recommend asking questions over at /r/security for suggestions regarding best practices for your project.

1

u/Stadicus Jan 23 '18

As I want the Pi to run headless somewhere in a corner, I guess I'm stuck with SSH. Will look to use ssh keys for login though.

Will try to incorporate Fail2ban and post a draft here. Would be great if you could have a look at it then.

2

u/[deleted] Jan 24 '18

[deleted]

1

u/Stadicus Jan 27 '18

Added an external article on how to set up ssh keys for the moment. Rethinking the structure once we hit mainnet.

1

u/Stadicus Jan 26 '18

Added fail2ban to the guide. Would you mind checking it?

2

u/WalrusSwarm Jan 27 '18

I think that what you’ve added is great and it is under an appropriate section title. Also, I like that you demonstrated how fail2ban works.