pull down to refresh
Custodial means you're as much the next hack away from loss as on your own environment. So I don't think it offers that much additional protection: in both cases spendable balance on your receiving node is a big problem and you need to manage that precise thing, but you kind of need to do liquidity management anyway, so it's not real extra effort. In general in Bitcoin you have a rather low chance of recovering your funds from a custodian effup (plus you'll get worthless shitfiat after a decade... or 2)
You could instead use the CLINK plugin with your own lnpub, which has receive isolation through noffer, and perhaps @06bc1a977d could explain if the plugin already works with blinded path (or explain the roadmap.)
As soon as @justin_shocknet & co launch the major version they're working on, I'll be (slowly) testing a setup on a fully ingress firewalled, egress whitelisted, isolated bitcoind + LND + lnpub, funded with private channels only. If that works, it will be possible to have all this on a lean stack with btcpayserver, or just a silly little woocommerce website... anything. with no hot keys on your storefront.
I was hoping someone with more knowledge than this would give their input. Thanks for being the one.
It feels shit recommending custodied solutions, but even worse telling people to yolo a self-hosted setup now. The point you made about liquidity mgmt is really the important thing.
If that works, it will be possible to have all this on a lean stack with btcpayserver, or just a silly little woocommerce website... anything. with no hot keys on your storefront.
This sounds interesting.
I'm still testing so don't take this as authoritative. I went through the initial phase with a bootstrapped wallet but I think it's better to skip it if you have at least some sats. My most reliable private channel partner w/ mobile LND this year has been Megalithic's small channels node, and the only thing thwarting that would be high on-chain fees.
I think you can do something similar with Alby Hub (but I've not tested that at all.)
You can only manage your liquidity if you run self-custodial nodes (onchain+lightning)
BTCpay server is just an interface that allows you to manage liquidity and show it to you in a sweet UI dashboard.
There are plenty of alternatives to the BTCpay server in case you lost trust in it. CLINK, LN.pub + Shockwallet is one. Just do your research and evaluate the options. Ensuring they are FOSS is a good start.
They were pretty quick on rolling out the security update, which required you do reset LND macaroons iirc.
You can link it to a Blink's custodial wallet too, (but I think Blink requires a phone number -- one of these #1567252?) if you're worried about exposing your node online.