Agreed. Much like my other old project CLBOSS, however, any deployment that includes VLS with CLN can only be improved compared to just CLN out-of-the-box.
Even if you end up just running VLS on the same machine as the node software (very much NOT our recommended setup), if you do something like run them as separate users and restricting the VLS user and completely disabling its password (which you should also do to CLN BTW if you can arrange it), you can still get a little more security simply from the additional isolation.
Agreed. Much like my other old project CLBOSS, however, any deployment that includes VLS with CLN can only be improved compared to just CLN out-of-the-box.
Even if you end up just running VLS on the same machine as the node software (very much NOT our recommended setup), if you do something like run them as separate users and restricting the VLS user and completely disabling its password (which you should also do to CLN BTW if you can arrange it), you can still get a little more security simply from the additional isolation.