mirror of
https://github.com/ChristopherA/Learning-Bitcoin-from-the-Command-Line.git
synced 2025-06-07 16:06:26 +00:00
77 lines
3.7 KiB
Markdown
77 lines
3.7 KiB
Markdown
# Chapter 14.2: Changing Your Bitcoin Hidden Services
|
|
|
|
> :information_source: **NOTE:** This section has been recently added to the course and is an early draft that may still be awaiting review. Caveat reader.
|
|
|
|
You've got a working Tor service, but over time you may wish to reset or otherwise adjust it.
|
|
|
|
## Secure Your Hidden Services
|
|
|
|
Tor allows you to limit which clients talk to your hidden services. If you did not already authorize your client during your server setup, at the earliest opportunity you should do the following:
|
|
|
|
1. Request your Tor V3 Authentication Public Key from your client. (In [GordianWallet](https://github.com/BlockchainCommons/GordianWallet-iOS), it's available under the settings menu.)
|
|
2. Go to the appropriate subdirectory for your Bitcoin hidden service, which if you used Bitcoin Standup is `/var/lib/tor/standup/`.
|
|
3. Go to the `authorized_clients` subdirectory.
|
|
4. Add a file called `[anything].auth`. The `[anything]` can really be anything.
|
|
5. Place the public key (and nothing else) in the file.
|
|
|
|
Once you've added an `.auth` file to the `authorized_client` subdirectory, then only authorized clients will be able to communicate with that hidden service. You can add ~330 different public keys to enable different clients.
|
|
|
|
## Reset Your `bitcoind` Onion Address
|
|
|
|
If you ever want to reset your onion address for `bitcoind`, just remove the `onion_private_key` in your data directory, such as `~/.bitcoin/testnet`:
|
|
```
|
|
$ cd ~/.bitcoin/testnet
|
|
$ rm onion_private_key
|
|
```
|
|
When you restart, a new onion address will be generated:
|
|
```
|
|
2020-07-22T23:52:27Z tor: Got service ID pyrtqyiqbwb3rhe7, advertising service pyrtqyiqbwb3rhe7.onion:18333
|
|
2020-07-22T23:52:27Z tor: Cached service private key to /home/standup/.bitcoin/testnet3/onion_private_key
|
|
```
|
|
|
|
## Reset Your RPC Onion Address
|
|
|
|
If you want to reset your onion address for RPC access, you similarly delete the appropriate `HiddenServiceDirectory` and restart Tor:
|
|
```
|
|
$ sudo rm -rf /var/lib/tor/standup/
|
|
$ sudo /etc/init.d/tor restart
|
|
```
|
|
|
|
> :warning: **WARNING:** Reseting your RPC onion address will disconnect any mobile wallets or other services that you've connected using the Quicklink API. Do this with extreme caution.
|
|
|
|
## Force `bitcoind` to Use Tor
|
|
|
|
Finally, you can force `bitcoind` to use onion by adding the following to your `bitcoin.conf`:
|
|
```
|
|
proxy=127.0.0.1:9050
|
|
listen=1
|
|
bind=127.0.0.1
|
|
onlynet=onion
|
|
```
|
|
You will then need to add onion-based seed nodes or other nodes to your setup, once more by editing the `bitcoin.conf`:
|
|
```
|
|
seednode=address.onion
|
|
seednode=address.onion
|
|
seednode=address.onion
|
|
seednode=address.onion
|
|
addnode=address.onion
|
|
addnode=address.onion
|
|
addnode=address.onion
|
|
addnode=address.onion
|
|
```
|
|
See [Bitcoin Onion Nodes](https://github.com/emmanuelrosa/bitcoin-onion-nodes) for a listing and an example of how to add them.
|
|
|
|
Afterward, restart `tor` and `bitcoind`.
|
|
|
|
You should now be communicating exlusively on Tor. But, unless you are in a hostile state, this level of anonymity is probably not required. It also is not particularly recommended: you might greatly decrease your number of potential peers, inviting problems of censorship or even correlation. You may also see lag. And, this setup may give you a false sense of anonymity that really doesn't exist on the Bitcoin network.
|
|
|
|
> :warning: **WARNING:** This setup is untested! Use at your own risk!
|
|
|
|
## Summary: Changing Your Bitcoin Hidden Services
|
|
|
|
You probably won't need to fool with your Onion services once you've verified them, but in case you do, here's how to reset a Tor address that has become compromised or to move over to exclusive-Tor use for your `bitcoind`.
|
|
|
|
## What's Next?
|
|
|
|
Continue "Understanding Tor" with [14.3: Adding SSH Hidden Services](14_3_Adding_SSH_Hidden_Services.md).
|