Run LND

# adjust privs on PEM file
sudo chmod 600 ~/PATH_TO_PEM_FILE

ssh -i ~/path_to_downloaded_pem_file [email protected]_OF_INSTANCE

sudo apt update && sudo apt upgrade -y && sudo apt install -y emacs
​
# open and then quit
emacs
​
# change owner of emacs config
sudo chown -R ubuntu ~/.emacs.d

sudo emacs /etc/sysctl.conf

fs.file-max=512000

# Save and reboot
sudo reboot

# List storage
lsblk
# You will get the volume name appearing as something like nvme1n1
​
# Check on the storage to make sure it is empty
sudo file -s /dev/nvme1n1
# should show "/dev/nvme1n1: data" meaning empty
​
# Format the storage as ext4. It may take a second
sudo mkfs -t ext4 /dev/nvme1n1
​
# Make a directory for the volume and mount it
sudo mkdir /blockchain
sudo mount /dev/nvme1n1 /blockchain/
cd /blockchain
​
# Double check you have enough space
df -h .
# should show available space in the volume
​
# Automatically mount the partition, but first backup the existing config
sudo cp /etc/fstab /etc/fstab.bak
sudo emacs /etc/fstab
​
# Create entry in the file:
/dev/nvme1n1 /blockchain ext4 defaults,nofail 0 0
​
# Save and exit, then test:
sudo mount -a
# Should show no errors
​
# Take ownership of the directory:
sudo chown `whoami` /blockchain

# Check if UFW is installed
which ufw
sudo ufw logging on
sudo ufw enable
# PRESS Y
# Allow access to 9735 the P2P port and 10009 the gRPC port
sudo ufw status
sudo ufw allow OpenSSH
sudo ufw allow 9735
sudo ufw allow 10009

sudo iptables -N syn_flood
sudo iptables -A INPUT -p tcp --syn -j syn_flood
sudo iptables -A syn_flood -m limit --limit 1/s --limit-burst 3 -j RETURN
sudo iptables -A syn_flood -j DROP
sudo iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 1 -j ACCEPT
sudo iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 1 -j LOG --log-prefix PING-DROP:
sudo iptables -A INPUT -p icmp -j DROP
sudo iptables -A OUTPUT -p icmp -j ACCEPT

sudo apt-get update && sudo apt install -y apt-transport-https
​
# Edit package sources for installation
sudo emacs /etc/apt/sources.list.d/tor.list
​
deb https://deb.torproject.org/torproject.org focal main
deb-src https://deb.torproject.org/torproject.org focal main
​
# Get the GPG key for Tor and add it to GPG
sudo curl https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc | sudo gpg --import
sudo gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -
​
# Install the Tor package
sudo apt update && sudo apt install -y tor deb.torproject.org-keyring
​
# Add a user for Tor
sudo usermod -a -G debian-tor `whoami`

# Edit the Tor configuration
sudo emacs /etc/tor/torrc

# Add these lines at the top of the file:
​
ControlPort 9051
CookieAuthentication 1
CookieAuthFileGroupReadable 1
Log notice stdout
SOCKSPort 9050

# Restart the Tor service
sudo service tor restart

curl --socks5 localhost:9050 --socks5-hostname localhost:9050 -s https://check.torproject.org/ | cat | grep -m 1 Congratulations | xargs

sudo apt install git build-essential libtool autotools-dev automake pkg-config libssl-dev libevent-dev bsdmainutils libboost-system-dev libboost-filesystem-dev libboost-chrono-dev libboost-program-options-dev libboost-test-dev libboost-thread-dev libminiupnpc-dev libzmq3-dev
git clone -b v0.21.0 https://github.com/bitcoin/bitcoin.git
cd bitcoin/
./autogen.sh 
./configure CXXFLAGS="--param ggc-min-expand=1 --param ggc-min-heapsize=32768" --enable-cxx --with-zmq --without-gui --disable-shared --with-pic --disable-tests --disable-bench --enable-upnp-default --disable-wallet
# This may take a while
make -j "$(($(nproc)+1))"
sudo make install

mkdir /blockchain/.bitcoin && mkdir /blockchain/.bitcoin/data && mkdir ~/.bitcoin

wget https://raw.githubusercontent.com/bitcoin/bitcoin/master/share/rpcauth/rpcauth.py
python ./rpcauth.py bitcoinrpc
# This will output the authentication string to add to bitcoin.conf
# Save the password, this will be used for LND configuration

emacs ~/.bitcoin/bitcoin.conf

# Set the best block hash here:
assumevalid=
​
# Run as a daemon mode without an interactive shell
daemon=1
​
# Set the data directory to the storage directory
datadir=/blockchain/.bitcoin/data
​
# Set the number of megabytes of RAM to use, set to like 50% of available memory
dbcache=3000
​
# Add visibility into mempool and RPC calls for potential LND debugging
debug=mempool
debug=rpc
​
# Turn off the wallet, it won't be used
disablewallet=1
​
# Don't bother listening for peers
listen=0
​
# Constrain the mempool to the number of megabytes needed:
maxmempool=100
​
# Limit uploading to peers
maxuploadtarget=1000
​
# Turn off serving SPV nodes
nopeerbloomfilters=1
peerbloomfilters=0
​
# Don't accept deprecated multi-sig style
permitbaremultisig=0
​
# Set the RPC auth to what was set above
rpcauth=
​
# Turn on the RPC server
server=1
​
# Reduce the log file size on restarts
shrinkdebuglog=1
​
# Set testnet if needed
testnet=1
​
# Turn on transaction lookup index
txindex=1
​
# Turn on ZMQ publishing
zmqpubrawblock=tcp://127.0.0.1:28332
zmqpubrawtx=tcp://127.0.0.1:28333

# put under [main] section
# Some mainnet peers
addnode=gyn2vguc35viks2b.onion
addnode=kvd44sw7skb5folw.onion
addnode=nkf5e6b7pl4jfd4a.onion
addnode=yu7sezmixhmyljn4.onion
addnode=3ffk7iumtx3cegbi.onion
addnode=3nmbbakinewlgdln.onion
addnode=4j77gihpokxu2kj4.onion
addnode=546esc6botbjfbxb.onion
addnode=5at7sq5nm76xijkd.onion
addnode=77mx2jsxaoyesz2p.onion
addnode=7g7j54btiaxhtsiy.onion
addnode=a6obdgzn67l7exu3.onion
addnode=ab64h7olpl7qpxci.onion
addnode=am2a4rahltfuxz6l.onion
addnode=azuxls4ihrr2mep7.onion
addnode=bitcoin7bi4op7wb.onion
addnode=bitcoinostk4e4re.onion
addnode=bk7yp6epnmcllq72.onion
addnode=bmutjfrj5btseddb.onion
addnode=ceeji4qpfs3ms3zc.onion
addnode=clexmzqio7yhdao4.onion
addnode=gb5ypqt63du3wfhn.onion
addnode=h2vlpudzphzqxutd.onion
​
# Only use Tor
onlynet=onion
​
# Connect to Tor proxy
proxy=127.0.0.1:9050

bitcoind

crontab -e

# Start Bitcoin Core on boot
@reboot bitcoind

# Mainnet:
ln -s /blockchain/.bitcoin/data/debug.log ~/bitcoind-mainnet.log
​
# Or Testnet:
ln -s /blockchain/.bitcoin/data/testnet3/debug.log ~/bitcoind-testnet.log

sudo emacs /etc/logrotate.d/bitcoin-debug
​
# Add these instructions
# Uncomment depending on mainnet or testnet:
# /blockchain/.bitcoin/data/debug.log
# /blockchain/.bitcoin/data/testnet3/debug.log
{
        rotate 5
        copytruncate
        daily
        missingok
        notifempty
        compress
        delaycompress
        sharedscripts
}

go version
# Should show Go version 1.15.7 or higher
​
# If an out of date Go is already installed
sudo rm -rf /usr/local/go
​
# If installing Go for the first time
sudo apt-get update && sudo apt-get -y upgrade
​
# Download Go
wget https://golang.org/dl/go1.15.7.linux-amd64.tar.gz
​
# Extract it
sudo tar -xvf go1.15.7.linux-amd64.tar.gz
​
# Install it and remove the download
sudo mv go /usr/local && rm go1.15.7.linux-amd64.tar.gz
​
# On a new install, make a directory for it
mkdir ~/go
​
# On a new install, setup the path to use the Go directory
emacs ~/.profile
​
# Place lines at the end of the file:
GOPATH=$HOME/go
PATH="$HOME/bin:$GOPATH/bin:$HOME/.local/bin:/usr/local/go/bin:$PATH"
​
# Add an alias if running on Testnet
alias lncli="lncli --network=testnet"
​
# Save and exit, then run profile
. ~/.profile

# Get build tools
sudo apt-get install -y build-essential
​
# Clone the LND repo and install LND
cd ~/
git clone https://github.com/lightningnetwork/lnd.git
cd lnd
git checkout v0.12.1-beta
make && make install tags="autopilotrpc chainrpc invoicesrpc routerrpc signrpc walletrpc watchtowerrpc wtclientrpc"
mkdir ~/.lnd
emacs ~/.lnd/lnd.conf

[Application Options]
# Allow push payments
accept-keysend=1
​
# Public network name
alias=YOUR_ALIAS
​
# Allow gift routes
allow-circular-route=1
​
# Public hex color
color=#000000
​
# Log levels
debuglevel=CNCT=debug,CRTR=debug,HSWC=debug,NTFN=debug,RPCS=debug
​
# Public P2P IP (remove this if using Tor)
externalip=INSTANCE_IP
​
# Mark unpayable, unpaid invoices as deleted
gc-canceled-invoices-on-startup=1
gc-canceled-invoices-on-the-fly=1
​
# Avoid historical graph data sync
ignore-historical-gossip-filters=1
​
# Listen (not using Tor? Remove this)
listen=localhost
​
# Set the maximum amount of commit fees in a channel
max-channel-fee-allocation=1.0
​
# Set the max timeout blocks of a payment
max-cltv-expiry=5000
​
# Pending channel limit
maxpendingchannels=10
​
# Min inbound channel limit
minchansize=5000000
​
# gRPC socket binding
rpclisten=0.0.0.0:10009
​
# Avoid slow startup time
sync-freelist=1
​
# Avoid high startup overhead
stagger-initial-reconnect=1
​
# Delete and recreate RPC TLS certificate when details change or cert expires
tlsautorefresh=1
​
# Do not include IPs in the RPC TLS certificate
tlsdisableautofill=1
​
# Add DNS to the RPC TLS certificate
tlsextradomain=YOUR_DOMAIN_NAME
​
[Bitcoin]
# Turn on Bitcoin mode
bitcoin.active=1
​
# Set the channel confs to wait for channels
bitcoin.defaultchanconfs=2
​
# Forward fee rate in parts per million
bitcoin.feerate=1000
​
# Set bitcoin.testnet=1 or bitcoin.mainnet=1 as appropriate
bitcoin.mainnet=1
​
# Set the lower bound for HTLCs
bitcoin.minhtlc=1
​
# Set backing node, bitcoin.node=neutrino or bitcoin.node=bitcoind
bitcoin.node=bitcoind
​
[bitcoind]
# Configuration for using Bitcoin Core backend
​
# Set the password to what the auth script said
bitcoind.rpcpass=
​
# Set the username
bitcoind.rpcuser=bitcoinrpc
​
# Set the ZMQ listeners
bitcoind.zmqpubrawblock=tcp://127.0.0.1:28332
bitcoind.zmqpubrawtx=tcp://127.0.0.1:28333
​
[protocol]
# Enable large channels support
protocol.wumbo-channels=1
​
[routerrpc]
# Make sure that LND is the binary release or built with the routerrpc tag
​
# Set default chance of a hop success
routerrpc.apriorihopprob=0.5
​
# Start to ignore nodes if they return many failures (set to 1 to turn off)
routerrpc.aprioriweight=0.75
​
# Set minimum desired savings of trying a cheaper path
routerrpc.attemptcost=10
routerrpc.attemptcostppm=10
​
# Set the number of historical routing records
routerrpc.maxmchistory=10000
​
# Set the min confidence in a path worth trying
routerrpc.minrtprob=0.005
​
# Set the time to forget past routing failures
routerrpc.penaltyhalflife=6h0m0s
​
[routing]
# Set validation of channels off: only if using Neutrino
routing.assumechanvalid=1
​
[tor]
# Enable Tor if using
tor.active=1
tor.v3=1

[neutrino]
# Mainnet addpeers
neutrino.addpeer=btcd-mainnet.lightning.computer
neutrino.addpeer=mainnet1-btcd.zaphq.io
neutrino.addpeer=mainnet2-btcd.zaphq.io
neutrino.addpeer=mainnet3-btcd.zaphq.io
neutrino.addpeer=mainnet4-btcd.zaphq.io
​
# Testnet addpeers
neutrino.addpeer=btcd-testnet.ion.radar.tech
neutrino.addpeer=btcd-testnet.lightning.computer
neutrino.addpeer=lnd.bitrefill.com:18333
neutrino.addpeer=faucet.lightning.community
neutrino.addpeer=testnet1-btcd.zaphq.io
neutrino.addpeer=testnet2-btcd.zaphq.io
neutrino.addpeer=testnet3-btcd.zaphq.io
neutrino.addpeer=testnet4-btcd.zaphq.io
​
# Set fee data URL, change to btc-fee-estimates.json if mainnet
neutrino.feeurl=https://nodes.lightning.computer/fees/v1/btctestnet-fee-estimates.json

# Start LND with nohup for non-interactive operation
# Alternatively: use systemd https://gist.github.com/alexbosworth/171958cc9888b7ebf3a91e5c23a57464
nohup /home/ubuntu/go/bin/lnd > /dev/null 2> /home/ubuntu/.lnd/err.log &

openssl rand -hex 21 > ~/.lnd/wallet_password
​
cat ~/.lnd/wallet_password
# Copy this password
​
lncli create
# Follow prompts, use the wallet password as the initial password and set no cipher seed password

# Link if Mainnet
ln -s ~/.lnd/logs/bitcoin/mainnet/lnd.log ~/lnd-mainnet.log
​
# Link if Testnet
ln -s ~/.lnd/logs/bitcoin/testnet/lnd.log ~/lnd-testnet.log
​
# Setup crontab to start and unlock LND on boot
crontab -e

# Start LND on boot - or use systemd if you prefer: https://gist.github.com/alexbosworth/171958cc9888b7ebf3a91e5c23a57464
@reboot nohup /home/ubuntu/go/bin/lnd > /dev/null 2> /home/ubuntu/.lnd/err.log &
​
# Unlock wallet if locked
*/5 * * * * /home/ubuntu/.npm-global/bin/bos unlock /home/ubuntu/.lnd/wallet_password

## Connect the new node to some existing nodes to bootstrap the graph
# Testnet, connect to htlc.me, testnet.yalls.org
lncli connect 03c[email protected]34.201.74.232:9735
lncli connect 027[email protected]3.13.29.161:9735
# Mainnet, connect to some nodes, like:
lncli connect 03e[email protected]3.13.48.80:9735
​
# Open channels to an initial node to bootstrap network connectivity
# testnet
lncli openchannel 03c856d2dbec7454c48f311031f06bb99e3ca1ab15a9b9b35de14e139aa663b463 500000
# mainnet
lncli openchannel 03e50492eab4107a773141bb419e107bda3de3d55652e6e1a41225f06a0bbf2d56 5000000

curl -sL https://deb.nodesource.com/setup_14.x | sudo -E bash -
sudo apt-get install -y nodejs
​
# Avoid using sudo with NPM
mkdir ~/.npm-global
npm config set prefix '~/.npm-global'
​
# Update path
emacs ~/.profile
​
# Add line to the end
PATH="$HOME/.npm-global/bin:$PATH"
​
# Save and exit, update shell:
. ~/.profile
​
# Install balanceofsatoshis
npm i -g balanceofsatoshis

bos chain-deposit