Christian Rotzoll
6 years ago
committed by
GitHub
GitHub
17 changed files with 301 additions and 42 deletions
@ -0,0 +1,9 @@ |
|||||
|
#!/bin/bash |
||||
|
|
||||
|
# SHORTCUT COMMANDS you can call as user 'admin' from terminal |
||||
|
|
||||
|
# command: raspiblitz |
||||
|
# calls the the raspiblitz mainmenu |
||||
|
function raspiblitz() { |
||||
|
/home/admin/00mainMenu.sh |
||||
|
} |
||||
@ -1,2 +1,2 @@ |
|||||
# RaspiBlitz Version - always [main].[sub] |
# RaspiBlitz Version - always [main].[sub] |
||||
codeVersion="0.98" |
codeVersion="0.99" |
||||
@ -0,0 +1,119 @@ |
|||||
|
#!/bin/bash |
||||
|
|
||||
|
# command info |
||||
|
if [ $# -eq 0 ] || [ "$1" = "-h" ] || [ "$1" = "-help" ]; then |
||||
|
echo "small config script to autounlock lnd after restart" |
||||
|
echo "lnd.autounlock.sh [on|off] [?passwordC]" |
||||
|
exit 1 |
||||
|
fi |
||||
|
|
||||
|
# 1. parameter [on|off] |
||||
|
turn="off" |
||||
|
if [ "$1" = "1" ] || [ "$1" = "on" ]; then turn="on"; fi |
||||
|
|
||||
|
# 2. parameter [?passwordC] |
||||
|
passwordC=$2 |
||||
|
|
||||
|
# run interactive if 'turn on' && no further parameters |
||||
|
if [ "${turn}" = "on" ] && [ ${#passwordC} -eq 0 ]; then |
||||
|
|
||||
|
dialog --backtitle "LND Auto-Unlock" --inputbox "ENTER your PASSWORD C: |
||||
|
|
||||
|
For more details see chapter in GitHub README |
||||
|
'Auto-unlock LND on startup' |
||||
|
https://github.com/rootzoll/raspiblitz |
||||
|
|
||||
|
Password C will be stored on the device. |
||||
|
" 13 52 2>./.tmp |
||||
|
passwordC=$( cat ./.tmp ) |
||||
|
|
||||
|
# test if empty |
||||
|
if [ ${#passwordC} -eq 0 ]; then |
||||
|
echo "CANCEL input cannot be empty" |
||||
|
sleep 3 |
||||
|
exit 1 |
||||
|
fi |
||||
|
|
||||
|
# test if correct |
||||
|
echo "testing password .. please wait" |
||||
|
sudo systemctl restart lnd |
||||
|
sleep 4 |
||||
|
result=$(sudo python /home/admin/config.scripts/lnd.unlock.py ${passwordC}) |
||||
|
invalid=$(echo "${result}" | grep -c 'invalid') |
||||
|
if [ ${invalid} -gt 0 ];then |
||||
|
echo "PASSWORD C is wrong - try again or cancel" |
||||
|
sleep 3 |
||||
|
sudo /home/admin/config.scripts/lnd.autounlock.sh on |
||||
|
exit 1 |
||||
|
fi |
||||
|
shred ./.tmp |
||||
|
fi |
||||
|
|
||||
|
# config file |
||||
|
configFile="/mnt/hdd/raspiblitz.conf" |
||||
|
|
||||
|
# lnd conf file |
||||
|
lndConfig="/mnt/hdd/lnd/lnd.conf" |
||||
|
|
||||
|
# check if config file exists |
||||
|
configExists=$(ls ${configFile} | grep -c '.conf') |
||||
|
if [ ${configExists} -eq 0 ]; then |
||||
|
echo "FAIL - missing ${configFile}" |
||||
|
exit 1 |
||||
|
fi |
||||
|
|
||||
|
# make sure entry line for 'autoUnlock' exists |
||||
|
entryExists=$(cat ${configFile} | grep -c 'autoUnlock=') |
||||
|
if [ ${entryExists} -eq 0 ]; then |
||||
|
echo "autoUnlock=" >> ${configFile} |
||||
|
fi |
||||
|
|
||||
|
# switch on |
||||
|
if [ "$1" = "1" ] || [ "$1" = "on" ]; then |
||||
|
|
||||
|
# make sure config values are uncommented |
||||
|
sudo sed -i "s/^#restlisten=.*/restlisten=/g" /mnt/hdd/lnd/lnd.conf |
||||
|
sudo sed -i "s/^#tlsextraip=.*/tlsextraip=/g" /mnt/hdd/lnd/lnd.conf |
||||
|
|
||||
|
# make sure config values exits |
||||
|
exists=$(sudo cat /mnt/hdd/lnd/lnd.conf | grep -c 'restlisten=') |
||||
|
if [ ${exists} -eq 0 ]; then |
||||
|
sudo sed -n -i 'p;4a restlisten=' /mnt/hdd/lnd/lnd.conf |
||||
|
fi |
||||
|
exists=$(sudo cat /mnt/hdd/lnd/lnd.conf | grep -c 'tlsextraip') |
||||
|
if [ ${exists} -eq 0 ]; then |
||||
|
sudo sed -n -i 'p;5a tlsextraip=' /mnt/hdd/lnd/lnd.conf |
||||
|
fi |
||||
|
|
||||
|
# set needed config values |
||||
|
sudo sed -i "s/^restlisten=.*/restlisten=0.0.0.0:8080/g" /mnt/hdd/lnd/lnd.conf |
||||
|
sudo sed -i "s/^tlsextraip=.*/tlsextraip=0.0.0.0/g" /mnt/hdd/lnd/lnd.conf |
||||
|
|
||||
|
# refresh TLS cert |
||||
|
sudo /home/admin/config.scripts/lnd.newtlscert.sh |
||||
|
|
||||
|
echo "switching the Auto-Unlock ON" |
||||
|
|
||||
|
# setting value in raspi blitz config |
||||
|
sudo sed -i "s/^autoUnlock=.*/autoUnlock=on/g" /mnt/hdd/raspiblitz.conf |
||||
|
|
||||
|
# password C needs to be stored on RaspiBlitz |
||||
|
echo "storing password for root in /root/lnd.autounlock.pwd" |
||||
|
sudo sh -c "echo \"${passwordC}\" > /root/lnd.autounlock.pwd" |
||||
|
|
||||
|
echo "Auto-Unlock is now ON" |
||||
|
fi |
||||
|
|
||||
|
# switch off |
||||
|
if [ "$1" = "0" ] || [ "$1" = "off" ]; then |
||||
|
echo "switching the Auto-Unlock OFF" |
||||
|
|
||||
|
# setting value in raspi blitz config |
||||
|
sudo sed -i "s/^autoUnlock=.*/autoUnlock=off/g" /mnt/hdd/raspiblitz.conf |
||||
|
|
||||
|
# delete password C securly |
||||
|
echo "shredding password on RaspiBlitz" |
||||
|
sudo shred -u /root/lnd.autounlock.pwd |
||||
|
|
||||
|
echo "Auto-Unlock is now OFF" |
||||
|
fi |
||||
@ -0,0 +1,29 @@ |
|||||
|
|
||||
|
#!/bin/bash |
||||
|
|
||||
|
# stop services |
||||
|
echo "making sure services are not running" |
||||
|
sudo systemctl stop lnd 2>/dev/null |
||||
|
|
||||
|
echo "deleting TLSCert" |
||||
|
sudo rm /mnt/hdd/lnd/tls.* 2>/dev/null |
||||
|
echo "let lnd generate new TLSCert" |
||||
|
sudo -u bitcoin /usr/local/bin/lnd &>/dev/null & |
||||
|
echo "wait until generated" |
||||
|
newCertExists=0 |
||||
|
count=0 |
||||
|
while [ ${newCertExists} -eq 0 ] |
||||
|
do |
||||
|
count=$(($count + 1)) |
||||
|
echo "(${count}/60) check for cert" |
||||
|
if [ ${count} -gt 60 ]; then |
||||
|
echo "FAIL - was not able to generate new LND certs" |
||||
|
exit 1 |
||||
|
fi |
||||
|
newCertExists=$(sudo ls /mnt/hdd/lnd/tls.cert 2>/dev/null | grep -c '.cert') |
||||
|
sleep 2 |
||||
|
done |
||||
|
sudo killall /usr/local/bin/lnd |
||||
|
echo "copy new cert to admin user" |
||||
|
sudo cp /mnt/hdd/lnd/tls.cert /home/admin/.lnd |
||||
|
echo "OK TLS certs are fresh" |
||||
@ -0,0 +1,9 @@ |
|||||
|
# parameter #1: password c to unlock wallet |
||||
|
import base64, codecs, json, requests, sys |
||||
|
url = 'https://localhost:8080/v1/unlockwallet' |
||||
|
cert_path = '/mnt/hdd/lnd/tls.cert' |
||||
|
data = { |
||||
|
'wallet_password': base64.b64encode(sys.argv[1]).decode() |
||||
|
} |
||||
|
r = requests.post(url, verify=cert_path, data=json.dumps(data)) |
||||
|
print(r.json()) |
||||
Loading…
Reference in new issue