BTCpayserver
-
@subtlecourage Let me work on this tomorrow. This tutorial doc makes it seem very simple, let's hope I didn't just jynx myself.
A counter-argument to adding this to cloudron might be that we are adding attack surface to what is essentially financial infrastructure. Some of Cloudron's apps might not have ever been security audited on the upstream side (unless this is an app requirement I am not aware of). Cloudron devs seem to push major updates quickly and support auto updating out-of-the-box, so that definitely helps. Again, I just think for powerful financial software like this it's important to consider. Multi-host cloudron is around the corner too.
Also keep in mind we already have this nice official tool that will produce a custom one-liner to install on a brand new VPS: install.btcpayserver.org They even offer the ability to SSH into the server for you via that webapp (I'm not sure if this is client or server side since wasm exists), although I feel more comfortable with the manual script option myself. It might also be neat if Cloudron borrowed from this approach.
I still think it is a great option for Cloudron, don't get me wrong. Researching and packaging a good user-friendly SOC stack might be where I look next if I'm not getting too far ahead of myself. Apps like Grafana + Prometheus + Metabase are already on cloudron so that's nice
@sysadmin Those are all valid points.
Personally, I would probably want it on its own dedicated cloudron box anyways.
But I would be intrigued to hear what others have to say about it.
Also, that install script http://install.btcpayserver.org/ is awesome!
-
@subtlecourage Let me work on this tomorrow. This tutorial doc makes it seem very simple, let's hope I didn't just jynx myself.
A counter-argument to adding this to cloudron might be that we are adding attack surface to what is essentially financial infrastructure. Some of Cloudron's apps might not have ever been security audited on the upstream side (unless this is an app requirement I am not aware of). Cloudron devs seem to push major updates quickly and support auto updating out-of-the-box, so that definitely helps. Again, I just think for powerful financial software like this it's important to consider. Multi-host cloudron is around the corner too.
Also keep in mind we already have this nice official tool that will produce a custom one-liner to install on a brand new VPS: install.btcpayserver.org They even offer the ability to SSH into the server for you via that webapp (I'm not sure if this is client or server side since wasm exists), although I feel more comfortable with the manual script option myself. It might also be neat if Cloudron borrowed from this approach.
I still think it is a great option for Cloudron, don't get me wrong. Researching and packaging a good user-friendly SOC stack might be where I look next if I'm not getting too far ahead of myself. Apps like Grafana + Prometheus + Metabase are already on cloudron so that's nice
@sysadmin That sounds good as you lift legitimate points, that I believe should be, and certainly are to some degree, considered for any app anyway. One thing though, I would not necessarily call this a "financial structure" more than a simple Payment Gateway to your BTC account, WHERE is the actual infrastructure, which is BLOCKCHAIN as we all know it.
This app also would run on its own container and I do not need to explain here how this is then running independently from all other app on the box, on the server. Indeed, it's a powerful 'financial' software and hopefully this would not be one's only payment option.
Of course, we would not accept to run any crappy quickly coded app and thus, there are many details to consider when one wants to add any kind of app the CR box.
So, when you look at the actual app source this is where one can see if this would be advanced enough to be considered to be added to a CR box.
The app has an API and is already set to reach to the largest audience of website users/owners with integration to WordPress, Woocommerce, Drupal, Tor, Magento, and PrestaShop and it's developed with rage by 89 developers and 496 releases until now (seems to be started 3 years ago), with the most recent one 8 hours ago. Main code language is C#.
There actually is ONLY 65 open issues out of ONLY 1044 and that means a lot already imho. I see no issue with hacked 'financial infrastructure' or anything in the like. In the contrary, this seems to an powerful and stable enough app ready for production.
My 2cents on the matter
Andy -
@sysadmin Those are all valid points.
Personally, I would probably want it on its own dedicated cloudron box anyways.
But I would be intrigued to hear what others have to say about it.
Also, that install script http://install.btcpayserver.org/ is awesome!
@subtlecourage said in BTCpayserver:
Personally, I would probably want it on its own dedicated cloudron box anyways.
No need as once we have Sysbox integrated as an option in the UI (or default) the isolation per container will be much stronger, not needing a separate machine.
-
@subtlecourage said in BTCpayserver:
Personally, I would probably want it on its own dedicated cloudron box anyways.
No need as once we have Sysbox integrated as an option in the UI (or default) the isolation per container will be much stronger, not needing a separate machine.
@robi said in BTCpayserver:
@subtlecourage said in BTCpayserver:
Personally, I would probably want it on its own dedicated cloudron box anyways.
No need as once we have Sysbox integrated as an option in the UI (or default) the isolation per container will be much stronger, not needing a separate machine.
And that's a big PLUS... yeah.
Andy -
@subtlecourage said in BTCpayserver:
Personally, I would probably want it on its own dedicated cloudron box anyways.
No need as once we have Sysbox integrated as an option in the UI (or default) the isolation per container will be much stronger, not needing a separate machine.
@robi Fantastic.
I don't really know to much about docker or docker separation - so that's cool its already being addressed.
-
Thankfully Cloudron will make isolating infrastructure super easy to do with multi-host coming soon in v7.0
I haven't heard of sysbox, but rootless docker + user namespaces per container is pretty good at solving something currently "bad" security-wise about docker.
Regarding btcpayserver, I am waiting on a server deployment and will be testing it shortly
-
Thankfully Cloudron will make isolating infrastructure super easy to do with multi-host coming soon in v7.0
I haven't heard of sysbox, but rootless docker + user namespaces per container is pretty good at solving something currently "bad" security-wise about docker.
Regarding btcpayserver, I am waiting on a server deployment and will be testing it shortly
@sysadmin said in BTCpayserver:
Thankfully Cloudron will make isolating infrastructure super easy to do with multi-host coming soon in v7.0
I haven't heard of sysbox, but rootless docker + user namespaces per container is pretty good at solving something currently "bad" security-wise about docker.
Regarding btcpayserver, I am waiting on a server deployment and will be testing it shortly
How did that deployment go?
We are starting to consider this as well, and would love your feedback.
-
P privsec referenced this topic on
-
So how is this one coming along?Anyone deploy it successfully?
@subtlecourage also curious..
Any updates?
-
What is the latest on BTCpay Server on Cloudron? It was version 1.0.6.2 when it was request. Many releases have been made since then.
https://github.com/btcpayserver/btcpayserver/releases?page=10Now we are on version 1.12.5
https://github.com/btcpayserver/btcpayserver/releasesLicence: MIT
Docker: Yes
Active development: Yes
Demo: https://mainnet.demo.btcpayserver.org/login?ReturnUrl=%2FSome features include point-of-sale support, crowdfunding support and a button to tip developers.
https://docs.btcpayserver.org/Apps/BTCpay Server also supports some applications found on Cloudron, so lets support this!
-
This would be nice to have
-
We are offering a 210 EUR bounty (paid in BTC) if somebody can package this for cloudron
-
I will give it a try, but no promises.
-
+1 for BTCpayserver
-
We are offering a 210 EUR bounty (paid in BTC) if somebody can package this for cloudron
@nostrdev-com I would be happy to add another 100 euros (in btc) to the bounty. Over the long run it will be cheaper than the VPS Iām currently hosting my BTCPar Server on.
-
BTCPay Server looks like an inspired App Request. Originally requested in 2020, BTCPay Server today still looks like the best of the Crypto wallet options out there which are Free Software, deployable with Docker and still being improved nearly 5 years later.
Cloudron doesn't have a Crypto app like this, yet. Lets make it happen.
https://github.com/btcpayserver
From Grok:
Pros:
Full sovereignty: Runs your own full Bitcoin node (and others like Litecoin).
Excellent Lightning Network integration.
Robust payment processing features (if you need them).
Strong focus on privacy and security.
Mature Docker deployment.
Can manage multiple stores/wallets.
Hardware wallet integration (Ledger, Trezor, Coldcard).
Extensible with plugins.
Cons:
Can be resource-intensive (requires a full node, disk space, and decent RAM).
Primarily Bitcoin-focused; support for other altcoins is less direct or requires more setup.
Might be overkill if you only need a simple personal wallet and not payment processing.
Learning curve can be steeper than simpler solutions. -
We put an ad up on Satshoot and got a response today: https://satshoot.com/naddr1qvzqqqrllupzqf6g0jtqpvttyjsmlvz3nnly5hg6mpy4nc7vuhtd02vafpnq58mcqy88wumn8ghj7mn0wvhxcmmv9uq3wamnwvaz7tmjv4kxz7fwwpexjmtpdshxuet59uqsuamnwvaz7tmwdaejumr0dshsz9mhwden5te0wfjkccte9ec8y6tdv9kzumn9wshsz9mhwden5te0vf5hgcm0d9hx2u3wwdhkx6tpdshsq2zyv4cxcmme94p9gsed2pshjt2nv4e8vetj946x7t2rd3hh2erjdahz6vrsvvm8vecla3c7h/
Watch this space: https://git.nostrdev.com/stuff/btcpay-cloudron
