Skip to content
This repository has been archived by the owner on Jun 15, 2021. It is now read-only.

Updating the "How to Seednode" docs #148

Merged
merged 34 commits into from Aug 6, 2019
Merged
Changes from 1 commit
Commits
Show all changes
34 commits
Select commit Hold shift + click to select a range
03ce827
Removed deprecated --myAddress arg
freimair Jul 20, 2019
3661e65
Refactored Intro and Seed node description
freimair Jul 20, 2019
9924f4b
Removed the side note about the memory leak
freimair Jul 20, 2019
8b19621
Refactored SeedNodeOps section
freimair Jul 20, 2019
dc6d213
Refactored how to run your seed node
freimair Jul 20, 2019
01b1cc1
Added systemd service howto
freimair Jul 20, 2019
6cb9c17
Added Takeover usecase
freimair Jul 20, 2019
a835ee3
Make payment stand out more
freimair Jul 20, 2019
2f7d9f2
Cosmetics
freimair Jul 21, 2019
565ef98
Added system health reports
freimair Jul 21, 2019
fde8c68
Bitcoind draft
freimair Jul 21, 2019
1d29bed
Refined running a seed node with systemd
freimair Jul 22, 2019
191dc76
Refined seed node intro
freimair Jul 22, 2019
ba79813
Remove deprecated shell script option
freimair Jul 22, 2019
f47d624
More detailed howto bitcoind
freimair Jul 22, 2019
98bae0d
Added hardening measures to service files
freimair Jul 22, 2019
2791e43
Streamline the text
freimair Jul 22, 2019
b21ba84
Relocated Getting in Touch section
freimair Jul 22, 2019
bef0da2
Relocated System requirements section
freimair Jul 22, 2019
cea9676
Streamlined the text some more + fixed an error
freimair Jul 22, 2019
3583ca7
Hardening of nginx config
freimair Jul 22, 2019
7dc6773
Fixed bitcoind config description
freimair Jul 23, 2019
875b211
Added disclaimer
freimair Jul 23, 2019
4a83907
Include feedback from @ManfredKarrer
freimair Jul 23, 2019
7cbf5f2
Added firewall section
freimair Jul 23, 2019
7023994
Apply suggestions from code review
freimair Jul 28, 2019
6863de9
Update exchange/howto/run-seednode.adoc
freimair Jul 29, 2019
96e41eb
Apply further suggestions from review
freimair Aug 2, 2019
5eec341
Update exchange/howto/run-seednode.adoc
freimair Aug 2, 2019
796dbeb
Reduced default max connections to 30
freimair Aug 2, 2019
09edf16
Apply suggestions from code review
freimair Aug 5, 2019
a7216af
Make bond amount more readable
freimair Aug 5, 2019
df5c505
Get rid of intro headline
freimair Aug 5, 2019
f8f7309
Remove unneeded config options
freimair Aug 5, 2019
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
12 changes: 6 additions & 6 deletions exchange/howto/run-seednode.adoc
Expand Up @@ -40,13 +40,13 @@ The operator of a seed node needs to:
- find yourself a deputy in case you are not available (travel, holiday, others, ...). Usually, one of the developers is there to help. Just inform them on your setup and all is good.
- keep the server up and running, including patching and hardening the operating system
- keep the seed node software up to date
- keep an eye on Bisq's communication channels for updates, issues, countermeasures,... (see <<Getting in Touch>>)
- keep an eye on Bisq's communication channels for updates, issues, countermeasures, etc (see <<Getting in Touch>>)
- keep an eye on the logs of the seed node and the operating system, and act if something shows up
- if necessary, report and escalate (see <<Getting in Touch>>)
- set up a bond of 20000 BSQ to get the privilege to run a seed node. In case of severe failure of service, the bond gets confiscated (burned).
m52go marked this conversation as resolved.
Show resolved Hide resolved
- create a monthly report https://github.com/bisq-network/roles/issues/15[here]

=== Payment
=== Compensation

A seed node operator has the right to:

Expand All @@ -63,7 +63,7 @@ With the advent of the DAO and the subsequent need of an additional 300GB of dis
Bisq uses Slack to communicate via chat. As a seed node operator, you are required to

- subscribe to the Bisq Slack channel `bisq-seednode` and `bisq-monitor`
- the `bisq-seednode` channel is the place where updates, issues, countermeasures, heads-ups, ... are discussed. If you encounter a problem with your seed node and cannot solve it by yourself, this is the place to report to (with a specific question, logs, ...). A developer will get back to you.
- the `bisq-seednode` channel is the place where updates, issues, countermeasures, heads-ups, etc are discussed. If you encounter a problem with your seed node and cannot solve it by yourself, this is the place to report to (with a specific question, logs, etc). A developer will get back to you.
- the `bisq-monitor` channel is the place where issues with seed nodes are reported, either manually or by our monitoring service. If your seed node is mentioned for having an issue, you are required to react.
- please be responsive when addressed

Expand All @@ -79,7 +79,7 @@ And please try to stay away from cheap hosting providers! They tend to not care

## Get a seed node up and running

You can run your seed node in many ways. The guide you are currently reading applies to a (debian-based) unix system with systemd available. Furthermore, we assume that only one seed node is operated per host. Please be aware that the guide is only a guide and not a step by step copy and paste how to, as we ignore for example the need for the occasional root access and file permissions, swap, general opsec, among other things. In case your host differs from our reference system, we are sure you can handle yourself.
You can run your seed node in many ways. The guide you are currently reading applies to a (debian-based) unix system with systemd available. Furthermore, we assume that only one seed node is operated per host. Please be aware that the guide is only a guide and not a step-by-step copy-and-paste how-to, as we ignore for example the need for the occasional root access and file permissions, swap, general opsec, among other things. In case your host differs from our reference system, we are sure you can handle yourself.

There are four pieces to the puzzle of successfully running a seed node:

Expand Down Expand Up @@ -183,7 +183,7 @@ Start by getting OpenJDK 10 up and running.

For getting the Bisq binaries, we recommend cloning the Bisq Git repository and compiling the code on your server. This way, you have precise control over what version you want to deploy. Furthermore, updating is very simple, just pull the changes, recompile and restart your service.

Furthermore, we recommend creating a user `bisq` in group `bisq` for service hardening reasons and using the `bisq`-users home directory to:
Furthermore, we recommend creating a user `bisq` in group `bisq` for service hardening reasons and using the `bisq` user's home directory to:

useradd -r -m bisq
cd /home/bisq
Expand Down Expand Up @@ -264,7 +264,7 @@ Then proceed to creating the SSL certificate that is later used to authenticate
cd /etc/nginx
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/cert.key -out /etc/nginx/cert.crt

Use `ON = bisq.network`, `OU = seednodes` and `CN = <your seed nodes onion address here (without the ".onion" part)>` for certificate creation. The onion address can be found in the `hostname`-file mentioned before.
Use `ON = bisq.network`, `OU = seednodes` and `CN = <your seed nodes onion address here (without the ".onion" part)>` for certificate creation. The onion address can be found in the `hostname` file mentioned before.

Configure the reverse proxy with clientssl enabled. You can simply append the snippet below to your `/etc/nginx/nginx.conf` file:

Expand Down