mirror of
https://github.com/Start9Labs/documentation.git
synced 2026-03-26 18:31:53 +00:00
Restructure 'complete'
This commit is contained in:
@@ -3,3 +3,40 @@
|
||||
*********************
|
||||
Bitcoin and Lightning
|
||||
*********************
|
||||
|
||||
.. _bitcoin-node:
|
||||
|
||||
Bitcoin Node
|
||||
============
|
||||
|
||||
The Embassy runs a Bitcoin Full Node. When most people say "full node" what they mean (or ought to mean) is "fully validating node", meaning that the node is capable of enforcing the consensus rules of Bitcoin by accepting, validating, and relaying every transaction and block produced by the network. Fully validating nodes are necessary for Bitcoin to exist and function properly and are what protect the network from attackers attempting to bypass the consensus rules. A fully validating node (aka full node) does not need to store the entire blockchain to accomplish this. A node that stores the entire blockchain is called a "full archival node". It is the same as a full node, except that it stores every single valid transaction and block ever produced by the network. There are not many reasons why an individual would want to run a full archival node. Most of the benefits of node operatorship are encompassed by a basic full node described above. Full archival nodes have the added benefit of enabling a block explorer. For instace, if you were interested in looking up the history of a particular address or viewing the details of a transaction, neither of which were your own. If an address or transaction is your own, you can view those details using a pruned node.
|
||||
|
||||
All that said, it will soon be possible to run a full archival node with he embassy, should you determine you want block explorer functionality. This will require plugging in an external hard drive to the embassy and changing a setting in the app, and also a resycnhing of the blockchain from genesis.
|
||||
|
||||
A video explainin the importance of running a node can be found `here <https://www.youtube.com/watch?v=oX0Yrv-6jVs>`__.
|
||||
|
||||
You can learn more about Bitcoin `here <https://lopp.net/bitcoin>`__.
|
||||
|
||||
.. _btc-wallets:
|
||||
|
||||
Bitcoin Wallets
|
||||
===============
|
||||
|
||||
The word "wallet" has come to mean a lot of things, depending on who you ask and what software you are using. There are (1) software "wallets", (2) hardware "wallets", (3) seed "wallets", and (4) branch "wallets". The one thing all these wallets have in common is that they have almost nothing in common. As the terms are used today, here is usually what they mean.
|
||||
|
||||
(1) SOFTWARE WALLETS - (such as FullyNoded and Specter) Software applications capable of interfacing with hardware wallets (see below), interfacing with one or more nodes, as well as address creation, transaction creation, transaction broadcasting, and transaction display. Most software wallets are also capable of creating and storing public/private keypairs, granting them properties of both hardware wallets (see below) and seed wallets (see below). When we say "wallet", we are referring to software applications that posses a user interface for interacting with the Bitcoin network. If a wallet is capable of creating, storing and using private keys, it should be referred to as just a wallet with signer ability.
|
||||
|
||||
(2) HARDWARE WALLETS – (such as ColdCard and Trezor) Physical devices that create and store public/private keypairs, exporting the public keys, NEVER exporting the private keys, and using the private keys to sign transactions on demand. Hardware wallets must interface with a software wallet in order to be useful to a user. For this reason, some have proposed renaming hardware wallets to "hardware signers" for clarity.
|
||||
|
||||
(3) SEED WALLETS - Basically just the root of a hierarchical deterministic tree of keypairs. It usually takes the form of a mnemonic phrase of 12 or 24 words. Why people refer to their mnemonic seed as a "wallet" is confusing. Just call it a seed.
|
||||
|
||||
(4) BRANCH WALLETS - This is how Specter uses the word wallet, and it is causing a lot of confusion. Whenever you create a new "wallet" in specter, you are actually creating a new hierarchical deterministic branch of your mnemonic seed - or in the case of multisig, multiple seeds. The branch you create can be based on "purpose" (segwit, non-segwit, single-sig, multi-sig, etc), "coin type" (Bitcoin, Doegecoin, etc), or "account" (for personal accounting). Change any of these parameters, and you have yourself a new wallet, which again is just a different branch of the same mnemonic seed that potentially abides by a different set of rules. Perhaps a better name for this concept is "bank". Instead of "wallets", you should be able to create different "banks" from your seed.
|
||||
|
||||
.. _lightning:
|
||||
|
||||
Lightning Network
|
||||
=================
|
||||
|
||||
The Lightning Network is a "payment layer" that sits on top of the Bitcoin blockchain, which it uses for final settlement. This allows Bitcoin to scale without affecting the security of the protocol layer. It is easiest to think of Lightning Network as a system that allows anyone to use their Bitcoin to have a running tab (think bar tab) of money they owe each other. For example, 2 friends may have a "channel" (tab) between them that they use for exchanging value. The channel keeps track of who owes what. Those payments can be settled at any time on the Bitcoin blockchain if either or both parties decide to close out. One big incentive to use Lightning is that payments are extremely fast and fees are extremely low. You can find an introductory video explanation `here <https://www.youtube.com/watch?v=rrr_zPmEiME>`__.
|
||||
|
||||
You can learn more about Lightning `here <https://lopp.net/lightning>`__.
|
||||
|
||||
@@ -3,3 +3,51 @@
|
||||
********
|
||||
Networks
|
||||
********
|
||||
|
||||
.. _lan:
|
||||
|
||||
LAN
|
||||
===
|
||||
|
||||
A Local Area Network (LAN) is a computer network that interconnects computers within a limited area such as a residence, school, laboratory, university campus, or office building.
|
||||
|
||||
Devices on a LAN are private and protected, such that only devices connected to the same Ethernet or WiFi network can see or communicate with them.
|
||||
|
||||
Your Embassy hosts itself on the LAN and is reachable by visiting its *.local* URL in the browser while also connected to the LAN.
|
||||
|
||||
.. note:: Any device connected to a LAN can inspect all communications on that LAN. To avoid snooping, your Embassy's LAN communications are encrypted using :ref:`ssl`, which requires :ref:`additional setup <ssl-setup>`.
|
||||
|
||||
.. _ssl:
|
||||
|
||||
SSL
|
||||
===
|
||||
|
||||
Visiting websites on the Tor network is slow. We wanted to provide a better option to access the Embassy at home. That’s why we created an address for the Embassy that can be accessed on your Local Area Network.
|
||||
|
||||
By default, this `.local` address is served like a regular website, over HTTP. Browsers make it noticeable when visiting a site over HTTP in the URL bar - it could be red, show an unlocked lock, or warn that the connection is not secure.
|
||||
|
||||
SSL certificates are what enable websites to move from HTTP to HTTPS, which increases security and makes browsers happy. Using the Secure Sockets Layer protocol, HTTPS enabled websites use certificates to establish authenticated and encrypted links between networked computers. It’s the standard technology for keeping an internet connection secure and safeguarding any sensitive data that is being sent between two devices, preventing third parties from reading and modifying any personal information transferred. They also verify ownership of a website.
|
||||
|
||||
Valid SSL certificates are typically issued and obtained from Certificate Authorities. These trusted third parties generate and distribute certificates, signing them with their trusted private key, which allows the clients who use them to verify their authenticity. Websites obtain a certificate from a CA then load it onto their website’s hosting service or server, allowing the website to load over HTTPS and have all traffic to and from the website be encrypted and secure.
|
||||
|
||||
We decided to have the Embassy act as a Certificate Authority. It creates a self-signed certificate, which means that the private key used to sign the digital certificate is the Embassy’s own private key instead of a third party’s.
|
||||
|
||||
When you setup SSL for your Embassy and device, the certificate communicates to the client (a browser) that the server (the Embassy) demonstrated ownership of the domain (the `start9-xxxxxxxx.local` address) to the certificate authority (created on the Embassy) at the time of certificate issuance (during the setup process). The Embassy dashboard can then be accessed from a home network (LAN) using a secure HTTPS connection!
|
||||
|
||||
For more information on how to setup your devices to enable this feature visit :ref:`ssl-setup`.
|
||||
|
||||
|
||||
.. _tor:
|
||||
|
||||
Tor
|
||||
===
|
||||
|
||||
The Onion Router, or Tor, is a free and open source software that enables anonymous communication. By routing Internet traffic though a worldwide, volunteer overlay network of nodes, requests are bundled in layers of encryption like the layers of an onion. The request is relayed across nodes, decrypting a layer only to reveal the next relay destination, until the request meets its final destination, without revealing the source IP address.
|
||||
|
||||
If a malicious third party were to intercept a request, they would see a garbled mess of the remaining onion encryption, and would only know that it came from some onion node and was heading to some other onion node. The contents, source, and destination of the message are totally anonymous.
|
||||
|
||||
When you use Tor to communicate with services running on the Embassy, all the traffic is onion routed and encrypted, and there are no Tor exit nodes involved - it's totally private with no configuration needed.
|
||||
|
||||
Furthermore, every service on the Embassy has a different Tor address, including the device itself. This is for privacy reasons - should one Tor address be exposed, the others will not be compromised. Tor addresses are actually ed25519 keys, which means they also provide all the benefits of cryptographically secure private/public keys.
|
||||
|
||||
Here's an introductory video on `Tor <https://www.youtube.com/watch?v=6czcc1gZ7Ak>`__.
|
||||
@@ -3,3 +3,15 @@
|
||||
***********
|
||||
Open Source
|
||||
***********
|
||||
|
||||
The Internet itself was built on free and publicly available code, with the values of collaboration, peer review, communication, and openness built into its very foundation. This decentralized model evolved into the open source movement, which uses these values to discover new ways to solve problems across boundaries and industries.
|
||||
|
||||
Open source software centered around the concept of user freedoms: freedom to see, modify, and redistribute the code to make it work for the user in whatever way they needed. It does not necessarily mean free to use. It means that the software will be better, cheaper, and more flexible if it is freely accessible, openly modifiable, and shared.
|
||||
|
||||
If anyone can inspect, modify, and distribute the code, bugs are more rapidly resolved, security vulnerabilities are more quickly audited and exposed. Community driven development efforts enable diverse collaboration which increases project reliability and longevity.
|
||||
|
||||
Distinct from open source software is proprietary, or closed source, software. Closed source software is strictly moderated, cannot legally be altered, copied, or distributed, and is paid for to be used as intended without modification. Only the code owners have the right to access the code.
|
||||
|
||||
As a company founded on the principles of freedom, every service we support is open source. We believe in contributing to the future of this vibrant and passionate ecosystem.
|
||||
|
||||
Open Source ideas explained in `Lego <https://www.youtube.com/watch?v=a8fHgx9mE5U>`_.
|
||||
@@ -0,0 +1,22 @@
|
||||
.. _start9:
|
||||
|
||||
***********
|
||||
Start9 Labs
|
||||
***********
|
||||
|
||||
Start9 Labs is a small, but rapidly growing team of passionate builders. We are based in Denver, Colorado, but with team members around the world.
|
||||
|
||||
"The Origin of “Start9”
|
||||
=======================
|
||||
|
||||
Pokemon is a game for Gameboy. Twitch is a live video streaming app. “Twitch Plays Pokemon” was a popular phenomenon where Twitch users would collaborate to play a SHARED game of Pokemon on Gameboy. Here’s how it worked:
|
||||
|
||||
Participants would use the Twitch message board to enter commands that then got executed in the gameplay. For example, if someone entered the command "right”, that would cause the player to move 1 space to the right. Commands would execute immediately after they were received, and anyone could enter a valid command at any time. You can think of Twitch Plays Pokemon as the more practical equivalent of placing a Gameboy in the middle of a crowded room and telling everyone to push buttons at the same time. As you might expect, the gameplay of Twitch Plays Pokemon was quite “twitchy”, but in a very "infinite monkey theory" way, progress could eventually be made.
|
||||
|
||||
In an effort to streamline play, a new game mode was devised in which players would “vote” for the next command and, every 4 seconds, whatever command received the most votes over the previous 4 seconds would execute in the game. Also introduced in this mode was the ability to attach multipliers to a command, such that the command would execute that number of times. For example, “right2” would cause the player to move 2 spaces to the right. “right3” would cause the player to move 3 spaces to the right, and so on. The highest number any participant could place after a command was 9, meaning whatever command they entered would execute 9 times. As you might expect, gameplay in this mode was less chaotic, more efficient, but it also meant each participant had less direct and immediate influence over the game. If a group of even 5-10 got together and colluded on their votes, they could practically take over the game and make contrarian ideas irrelevant. The new game mode was called “Democracy”, and the original game mode became known as “Anarchy”. Which game mode was engaged was itself governed by a democratic process: if more participants wanted to play in Democracy mode, then Democracy mode engaged; if more wanted to play in Anarchy mode, then Anarchy mode engaged.
|
||||
|
||||
To summarize: in Anarchy mode, everyone had equal influence over the game, but progress was slow and clunky. In Democracy mode, progress was fast and efficient, but colluding groups could marginalize individual participants and ruin the game for them.
|
||||
|
||||
So…individual participants discovered a means of effective protest whenever Democracy mode became suffocating, but they could not garner enough votes to switch back to Anarchy mode. Someone would type the command “start9” into the comments. This command meant “open the start menu 9 times in a row”, which, as you might imagine, would be enormously disruptive if executed. The entire screen would be blocked by the start menu, over and over. Typing “start9” was a participant’s way of signaling to other participants that they felt marginalized by Democracy mode, and they were ready to fight back. If others felt the same, they could also begin typing “start9” - then, sure enough, “start9” would finally receive more votes than the colluding group’s command, and the menu opening would begin. Every 4 seconds, the menu would open 9 times…again, and again, and again…until finally, the colluding group would be forced to either cooperate in reverting the game mode back to Anarchy mode or quit altogether.
|
||||
|
||||
Playing in Anarchy mode was impractical, but people did not want to play a game where they had no voice, where a group of insiders had taken total control. And so “start9” became the battle cry of the individual, the out-group, a means of signaling to other individuals that it was time to fight back against the usurpers - to use their own rules against them, until there was no alternative but to return control to the individual participants.
|
||||
|
||||
@@ -1,5 +1,96 @@
|
||||
.. _faq-basic-use:
|
||||
|
||||
*********
|
||||
Basic Use
|
||||
*********
|
||||
*************
|
||||
Basic Use FAQ
|
||||
*************
|
||||
|
||||
Is it easy to use?
|
||||
------------------
|
||||
Yes! The Embassy is designed to be plugged into power and internet, and after a short setup, is immediately ready to use. Getting Services is as easy as getting apps for a smartphone.
|
||||
As with anything new, you should expect to spend a little time learning the functions and features, and keep in mind that some Services may be more complex to understand and use than others.
|
||||
|
||||
So I can run my own cloud?
|
||||
--------------------------
|
||||
Yes! No special skills or knowledge are required to host all your own services and replace those previously thought "necessary" for modern digital life.
|
||||
|
||||
Can I run multiple Embassies?
|
||||
-----------------------------
|
||||
Yes, but there is currently no way to synchronize or federate them. We are working on ways to make this possible in the future.
|
||||
|
||||
What if I forget my Embassy password?
|
||||
-------------------------------------
|
||||
Check out the `docs <https://docs.start9.com/user-manual/general/forgot-password.html>`_ on forgot password, and let us know if you have any additional questions. All your services and data will remain.
|
||||
|
||||
Can I move my Embassy to another location? What happens when I do this?
|
||||
------------------------------------------------------------------------
|
||||
Yes, you can move the Embassy to another network. Your service tor addresses will remain the same.
|
||||
|
||||
What’s the advantage of using the .local address over the .onion address?
|
||||
-------------------------------------------------------------------------
|
||||
If you are in your home network it is both faster and more private since the connection never leaves your household. The downside is that it won’t work if you’re on the go.
|
||||
|
||||
Can I use the .local addresses over the Tor Browser?
|
||||
----------------------------------------------------
|
||||
Unfortunately, no. The Tor Browser requires all web visits to first enter the Tor network. Once you have entered the Tor network there is no way to exit the Tor network in such a way that .local/mDNS addresses resolve.
|
||||
|
||||
Can I not use .local addresses on Android? Why not?
|
||||
----------------------------------------------------
|
||||
Unfortunately, no. Google has not included support for .local addresses via mDNS for Android.
|
||||
|
||||
Is the software Open Source?
|
||||
----------------------------
|
||||
Yes! EmbassyOS is open sourced under the `Start9 Personal Use License <https://start9.com/license>`_. Some of our other projects are currently open sourced under MIT. You can find these in the Start9 `GitHub repository <https://github.com/Start9Labs>`_.
|
||||
|
||||
Is there a product warranty?
|
||||
----------------------------
|
||||
Yes! Start9 commits, to the best of our ability, to serving each beta Embassy product released until the wild. We will resolve any issue encountered with our provided hardware or software in a personalized matter. We strive to provide highly available, quality customer service.
|
||||
|
||||
Can you tell me about the License?
|
||||
----------------------------------
|
||||
EmbassyOS is published under our own Start9 Non-Commercial License, which has similar properties to many open source licenses with the exception that users cannot in any way, either through products or services, commercialize the source code, and any changes to the code or derivative works of the code are treated in the same manner. This means people will be welcome to access the source code, download it, use it, run it, fork it, change it, improve it - whatever they want - except sell it or sell services related to it.
|
||||
|
||||
I run a business, can I use an Embassy for tasks such as password management and file sharing?
|
||||
----------------------------------------------------------------------------------------------
|
||||
Absolutely. An Embassy would be a great addition to any business as it is easy to use and provides services that you control, with no subscription fees.
|
||||
|
||||
With the addition of `BTCPay Server <https://btcpayserver.org/>`_, you can even run your own payment processor and accept cryptocurrency payments with no third party necessary!
|
||||
|
||||
Can I have multiple users on my Embassy?
|
||||
----------------------------------------
|
||||
Currently, the Embassy itself is designed to for a single user. There is no way to grant others access to your Embassy without sharing your personal, master password, which is not recommended. There are certain services, however, such as Bitwarden, File Browser, and Mastodon, that absolutely support multiple users (aka multi-tenancy, aka uncle Jim model) where people who trust you can create their own, personal accounts for these services on your Embassy. Just remind them that they are trusting you with their data, and that it might be preferable for them to take the final leap of self-sovereignty and get an Embassy of their own.
|
||||
|
||||
What can I do if I am having issues connecting to an Android app?
|
||||
-----------------------------------------------------------------
|
||||
Unfortunately, Orbot can be finicky. The best solution to Android issues is normally to restart Orbot, or to reboot the phone. This will solve most common problems.
|
||||
|
||||
What can I do if I am having issues connecting with Consulate?
|
||||
--------------------------------------------------------------
|
||||
In the top right menu, select 'Clear Cache.' If this does not solve the problem, delete the bookmarked site entirely, then re-add it. This will solve most connection issues.
|
||||
|
||||
If I uninstall a service, then re-install it, does any data remain?
|
||||
-------------------------------------------------------------------
|
||||
No. When uninstalling a service, you completely destroy everything associated with it. This is because each service runs in it's own 'container', which includes all the required software and operating system environment that it needs to function. When uninstalling, this container is wiped from your Embassy's system, and with it, any associated service data that you have not backed up.
|
||||
|
||||
This can be useful, as you may want to wipe a service and start anew. For example, you might want to receive a fresh Tor .onion address, or to spin up a new Lightning node. However, if you do this, YOU MUST BE 100% CERTAIN THAT YOU ARE PREPARED TO LOSE ALL DATA for this service. Also, keep in mind that other services may depend on the service you are uninstalling.
|
||||
|
||||
Do I need to delete existing backups before doing a new backup? Or does a new backup override the old backup?
|
||||
-------------------------------------------------------------------------------------------------------------
|
||||
No, you don’t need to delete the old backups. The technology we use updates the existing backup.
|
||||
|
||||
Can I clone my Embassy SD card for backup purposes?
|
||||
---------------------------------------------------
|
||||
Warning: **DO NOT do this if you are running LND or c-lightning**. If you clone the SD card, then go back to running LND or c-lightning, and you *ever* try to restore the SD card, there is a good chance you will lose *all your channel funds*. Also, if you try to use the SD card for a 2nd Embassy, that will also result in loss of funds. This has nothing to do with Start9 or the Embassy; it is inherent to the architecture of Lightning.
|
||||
|
||||
If you are not running LND or c-lightning, then *yes*, it is possible to do a deep clone of the SD card as a backup. But even here, there are some considerations: Start9 does not test/support this officially, which means it is untested. Also, it may take a while to do a deep clone of the card since the ones we ship are 128GB and there isn't a really effective way to clone the Embassy card that isn't a byte-for-byte copy. However, if you do a byte for byte copy (128GB), and run `PiShrink <https://github.com/Drewsif/PiShrink>`_ you could flash that image file onto a new card and restore all of your data.
|
||||
|
||||
Why would I even buy this when I can just build it for free??
|
||||
-------------------------------------------------------------
|
||||
(1) White glove support. Because each Embassy comes with a unique product key engraved on it, and we have a record of all product keys ever, we can ask the user to verify their product key in order to receive a higher tier of support, such as phone calls.
|
||||
|
||||
(2) Supporting the project. Buying an Embassy from Start9 is your way of supporting the development of the project. And it's not just out of gratitude, but rather, a recognition that if the project isn't funded, the cool software stops coming.
|
||||
|
||||
(3) Convenience. This is the big one. It's true, some people will choose to use the software without buying an Embassy, but most will not. Very few people on Earth are comfortable using the command line, compiling code, and configuring an OS. Furthermore, hardware is necessary. Sure, some people already have a Raspberry Pi, and others may try to re-purpose an old laptop, but many people would be choosing between buying the Embassy hardware components themselves and assembling vs buying pre-assembled at a reasonable markup. And it's not just a pi, the Ambassador utilizes audio feedback, so a speaker is necessary too. Finally, due to the product key aspect, we can gate certain features of our hosted Service Marketplace. As in, if you buy an Embassy from us, certain services may be free, whereas they may be charged if you don't buy from us. Nothing stops a user from getting the service themselves from elsewhere, but again, convenience.
|
||||
|
||||
Bottom line...We are charging a very marginal rate for something incredibly powerful, and we think the convenience of a plug-and-play device, free service marketplace, and free white glove support is where the money is. Anyone could build their own couches too, but here is a reason furniture stores exist. How much is your time worth?
|
||||
|
||||
The fastest way to get support is via our `Telegram <https://t.me/start9_labs>`_ or `Matrix <https://matrix.to/#/!lMnRwPWnyQvOfAoEnD:matrix.start9labs.com>`_ channels. You can also `email us <support@start9labs.com>`_. Please do not hesitate to reach out!
|
||||
|
||||
@@ -1,5 +1,97 @@
|
||||
.. _faq-bitcoin:
|
||||
|
||||
*******
|
||||
Bitcoin
|
||||
*******
|
||||
***********
|
||||
Bitcoin FAQ
|
||||
***********
|
||||
|
||||
Why does the Bitcoin service take so long to be ready?
|
||||
------------------------------------------------------
|
||||
On first install, the Bitcoin service must verify the entire history of transactions in order to verify transactions going forward. This can take approximately a week depending on your internet connection. You can continue to use the Embassy normally in the meantime.
|
||||
You can learn more about the Initial Block Download in `this video <https://www.youtube.com/watch?v=OrYDehC-8TU>`_.
|
||||
|
||||
Can the IBD (Initial Block Download) be made faster? Or can wait times be improved?
|
||||
------------------------------------------------------------------------------------
|
||||
We have improvements on the way in mid-2021 to vastly improve the painful sync times, without sacrificing trust minimization.
|
||||
|
||||
I'm getting this error: unable to connect to bitcoind: -28: Loading block index... What do I do?
|
||||
------------------------------------------------------------------------------------------------
|
||||
The block index error is normal and goes away after the Bitcoin blockchain has synced. If you have completed the Initial Blockchain Download (IBD), this will be a few minutes at most.
|
||||
|
||||
Does the Embassy run a full archival Bitcoin node?
|
||||
--------------------------------------------------
|
||||
The Embassy runs a full node, but does not run a full *archival* node, it's pruned. This means it does not store the entire Blockchain. As it syncs, it discards blocks and transactions it does not need.
|
||||
It is fully validating and verifying consensus all the way from Genesis. Really, the only reason to store the entire Blockchain is if you want to run a block explorer. Learn more here: :ref:`node`. All this being said, it will be possible to run a full archival node on the Embassy in mid-2021, bringing this additional functionality to those that would like it.
|
||||
|
||||
What actions, specifically, are only possible with an archival, or ‘unpruned’ node?
|
||||
-----------------------------------------------------------------------------------
|
||||
The more sophisticated the blockchain analysis being done is, the more index data is required, which will increase the system resources required. For example, if you wanted to run a block explorer, you would require not only a full archival node, but also a full transaction index. So, specifically, at this time, a full archival node is required for running an Electrum server, a block explorer, and for doing advanced chain analysis in general.
|
||||
|
||||
Is it insecure to run a pruned node?
|
||||
------------------------------------
|
||||
As a user, pruned nodes and archival nodes provide you the same security. In a larger sense, if 100% of people ran pruned nodes, the security of the network could be in dire circumstances and be put at risk if no nodes kept history, as then no one could bootstrap new nodes. The reality however, is that most Embassy owners are new node operators, so there is no net systemic risk introduced.
|
||||
|
||||
The Bitcoin Service is different from the GUI version I am used to using (bitcoin-qt). How do I use this like I used to?
|
||||
-------------------------------------------------------------------------------------------------------------------------
|
||||
At present, the Embassy does not offer its own node visualization tool. You can view certain properties about your node inside the "Properties" section, but not in an animated GUI. If you want to use bitcoin-cli, you may do so by adding an SSH key onto your Embassy and exec-ing into the bitcoind docker container. Otherwise, the main way to actually *use* your node is through a wallet. The QT GUI is not usable because it cannot be served through the browser (which is necessary here), and last we checked, the QT desktop client was incapable of connecting to a remote node over Tor. As far as we are aware, the only wallets that support this are Specter, Fully Noded, and Sparrow.
|
||||
|
||||
Is a wallet vulnerable to hacking if it’s always online??
|
||||
---------------------------------------------------------
|
||||
Funds are not stored on the node typically. The node simply serves as a source of truth for the state of the blockchain. Attacks depend on where the keys are and where the signing happens. You can use something like a hardware wallet for better security. Though, to be fair, a lot of attacks depend on you or your machine being targeted specifically, and a whole bunch of attack vectors are highly theoretical and obscure.
|
||||
Most successful attacks seem to be either fake/doctored software or a social attack (tricking you into installing some malware or giving your seed outright or something like that).
|
||||
Keep in mind, however, the more value there is out there to steal, the more sophisticated attacks will get automated (bots, crawlers etc). So its not just the risk profile of today, but also tomorrow you have to consider. That’s why something like a hardware wallet or dedicated mobile device for key signing is a good idea.
|
||||
Even if your wallet is plugged into your Embassy, whether your wallet is hot or cold depends on the hardware that stores the keys.
|
||||
|
||||
How does Bitcoin Proxy request (and verify) data when that data is needed by some app using it?
|
||||
-----------------------------------------------------------------------------------------------
|
||||
Proxy fetches blocks from your pruned node if it still has them, and fetches them from peers when it does not. Proxy can ensures the fetched block is valid by comparing it to its header, which is retained by the pruned node. The header is a product of the hash of the block itself, amongst other things, so it can't be tampered with.
|
||||
|
||||
What is the difference between the Bitcoin Wallet Tracker and the Electrum Personal Server?
|
||||
-------------------------------------------------------------------------------------------
|
||||
Bitcoin Wallet Tracker and Electrum Personal Server are 2 services that do the same thing, similar to bitcoind vs btcd, or lnd vs c-lightning.
|
||||
Both work with your Bitcoin node to provide a richer set of information to wallets than could be done with bitcoind alone. They are basically identical in purpose, their differences are notably in the software memory requirements and how snappily they can answer the same questions.
|
||||
Electrum (and some other wallets) require more than just a Bitcoin node to run in a sovereign way, they require an “Electrum Server”. Both Electrum Personal Server and Bitcoin Wallet Tracker are “Electrum servers”.
|
||||
|
||||
How do I use Bitcoin Core as a wallet?
|
||||
--------------------------------------
|
||||
Bitcoin Core is a full node that also contains wallet functionality. Some will be familiar with Bitcoin-QT, which is a Bitcoin Core GUI that for a long time was the only available wallet. This is currently not compatible with the Embassy.
|
||||
You can use the wallet in Bitcoin Core, however it is for advanced users and is only available in the command line via SSH.
|
||||
|
||||
It is helpful to think of the Bitcoin Core service on the Embassy as your own personal Bitcoin Server. This is your own verified source of truth of the Bitcoin ledger, that requires no permission for you to set up and own. The job of your Bitcoin server is to verify that the transactions you want to make and receive are valid.
|
||||
There are modern wallets that have the ability to use your personal Bitcoin node as a source of truth, and with the advantages of additional security and advanced features. This also follows the Linux mantra of "do one thing and do it well." The recommended way to use Bitcoin with your Embassy’s Bitcoin node is with an external wallet.
|
||||
The available wallets are listed in the following FAQ.
|
||||
|
||||
Which wallets can I use that sync with my Embassy Bitcoin node?
|
||||
---------------------------------------------------------------
|
||||
The only currently available external options are FullyNoded and Specter. Within the Embassy, BTCPayServer is available, which offers a wallet that is automatically connected to your Embassy's Bitcoin Core node. Keep in mind that this first and foremost a payment gateway, rather than a personal wallet. Unforutnately, this is still not a popular functionality in Bitcoin wallets. We are in communication with several wallet developers about adding Tor full node support.
|
||||
|
||||
What Lightning wallets can I use that sync with my Embassy?
|
||||
-----------------------------------------------------------
|
||||
Spark, Zap, and Zeus.
|
||||
|
||||
Is BlueWallet an option?
|
||||
------------------------
|
||||
BlueWallet requires a separate backend service called LNDHub, which is not available on the Embassy at this time.
|
||||
|
||||
Is there a guide for connecting Specter Wallet to my Embassy?
|
||||
-------------------------------------------------------------
|
||||
There is. Please follow the integration guide `here <https://github.com/Start9Labs/bitcoind-wrapper/tree/master/docs/integrations/specter>`_ and select the tutorial based on your operating system.
|
||||
|
||||
More guides, particularly in video form, are forthcoming.
|
||||
|
||||
I want to use my hardware signer, such as Coldcard or Trezor, with my Embassy. How does this work?
|
||||
---------------------------------------------------------------------------------------------------
|
||||
You do not use hardware signers directly with your node. Hardware signers interface with wallets, and wallets interface with nodes.
|
||||
|
||||
Node (Embassy) <— Wallet (Specter, Sparrow, Electrum) <— Hardware signer (Coldcard, Trezor)
|
||||
|
||||
You would use your hardware signer with your wallet, then instruct that wallet to use Embassy as its node.
|
||||
|
||||
- Nodes are for interacting with the Bitcoin network: enforcing consensus rules, validating and relaying blocks/transactions, and broadcasting transactions.
|
||||
|
||||
- Wallets are for constructing and viewing transactions, as well as generating addresses.
|
||||
|
||||
- Signers are for generating and storing keys, as well as signing transactions.
|
||||
|
||||
The reason there is so much confusion about these 3 concepts is that the Bitcoin Core Node comes with its own Wallet (which you should not use), and that wallet is also a signer. In fact, most wallets double as signers, and most wallets do NOT support connecting to your own node. So, most wallets are actually serving as a wallet, a node, and a signer, which might be convenient, but it is neither trustless nor maximally secure. Ideally, you are using a wallet that supports both integrating with a hardware signer (like Coldcard or Trezor) AND a backend node (like on the Embassy).
|
||||
|
||||
Please note: of the wallets listed (Specter/Sparrow/Electrum), only Specter is currently able to use Embassy as it's node, but the other two should be available soon.
|
||||
@@ -1,5 +1,70 @@
|
||||
.. _faq-embassy:
|
||||
|
||||
*******
|
||||
Embassy
|
||||
*******
|
||||
***********
|
||||
Embassy FAQ
|
||||
***********
|
||||
|
||||
Can I run EmbassyOS on a VPS or VM?
|
||||
-----------------------------------
|
||||
Maybe, but we advise against this. It is designed to be used on a RaspberryPi.
|
||||
|
||||
Is it possible to use the EmbassyOS on my own hardware?
|
||||
-------------------------------------------------------
|
||||
Yes! The :ref:`diy guide <diy>` will take you through the setup steps. This option is great for people who already own the necessary hardware or who live outside the US and want to save on shipping and customs fees.
|
||||
|
||||
Additionally, EmbassyOS is available to build from source under the Start9 Personal Use License. If you have the time and energy, it is possible to download and compile EmbassyOS yourself, for free, with the caveat that your “Embassy” will not have a product key generated by us. This means you will miss out on the perks that come along with purchasing from us, which will grow over time.
|
||||
|
||||
Do I plug the Embassy into my computer?
|
||||
---------------------------------------
|
||||
No. The Embassy only needs to be plugged into power and internet, just like your router. You can set it up right by your router and forget about it.
|
||||
|
||||
How much storage does the Embassy have?
|
||||
---------------------------------------
|
||||
Currently, the Embassy ships with a 128gb of storage.
|
||||
|
||||
Are my Internet requests anonymous and secure?
|
||||
----------------------------------------------
|
||||
EmbassyOS and every service on the Embassy serve their own Tor Hidden Services with unique Tor addresses. The private keys used to create these addresses are generated on your phone or computer when you first set up the Embassy. No one, not even Start9, has any idea what your Tor addresses are, let alone the password(s) you choose to authenticate with them.
|
||||
|
||||
Does Start9 have access to my Embassy's encryption keys?
|
||||
--------------------------------------------------------
|
||||
No. Your keys are generated on your device using the password you create.
|
||||
|
||||
Can multiple Embassies be setup to run redundantly in physically separate locations?
|
||||
------------------------------------------------------------------------------------
|
||||
Soon (tm). Currently no, be we have plans for a feature that will enable Embassies to provide encrypted, automated backup services for one another.
|
||||
|
||||
How does the Embassy compare to other Bitcoin nodes or personal servers?
|
||||
------------------------------------------------------------------------
|
||||
The cheapest way to run a Bitcoin/Lightning node is to buy a Raspberry Pi (or equivalent), compile the software from source yourself, and host everything on Tor. This takes even technical people significant time to accomplish. On the other end of the spectrum is something like the Embassy, which "just works". In between is stuff like MyNode, Nodl, Dojo, Umbrel, and Raspiblitz, which all require some degree of command line effort and network configuration. The biggest benefit of the Embassy is that it is infinitely extensible to all of open-source, self-hosted software. The service listing will expand enormously over time in ways the other platforms cannot.
|
||||
|
||||
Would you consider (Umbrel, Nodl, Dojo, etc) a competitor to you guys, or are they different enough to be compatible?
|
||||
---------------------------------------------------------------------------------------------------------------------
|
||||
Other node devices are competitors, and there are distinct trade-offs to each platform, but we are definitely moving toward the same future, which is a win for everyone!
|
||||
We are taking more a general approach to all of open-source, self-hosted software, including Bitcoin/Lightning. They are more Bitcoin/Lightning oriented.
|
||||
|
||||
Is a more powerful device in the works??
|
||||
----------------------------------------
|
||||
In the near future, the Embassy will move to more powerful hardware.
|
||||
|
||||
I heard on an old podcast that there will be an Embassy Two, to be launched in 2021. Is there an ETA on this?
|
||||
--------------------------------------------------------------------------------------------------------------
|
||||
Do not expect a new device in 2021, but we are always doing R&D.
|
||||
|
||||
Can I mine Bitcoin with this?
|
||||
-----------------------------
|
||||
No, you can not.
|
||||
|
||||
Does the Embassy only work over Tor? No http or VPN...??
|
||||
--------------------------------------------------------
|
||||
The Embassy’s current primary communication is Tor, yes. In many cases we use HTTP over Tor (they are not mutually exclusive), you can see this by navigating to the Tor address in a browser and see the “http” in front of it. A VPN is a feature we’re exploring as an alternative to Tor to make things faster without meaningfully impacting privacy. You can also connect directly via LAN if you are on the same network as your device.
|
||||
|
||||
What if someone gets physical access to my device, can they read the contents? Is it encrypted?
|
||||
-----------------------------------------------------------------------------------------------
|
||||
The device is currently not currently protected in that way. Someone with physical access to the device can get full access to everything on it.
|
||||
|
||||
Apps like Bitwarden, however, do not store plaintext information, so your passwords will not be compromised unless they know your master password.
|
||||
|
||||
Why http and not https for .onion websites?
|
||||
-------------------------------------------
|
||||
When visiting a Tor V3 URL (.onion website), your communications are end-to-end encrypted and onion-routed by default. There is no added benefit to using https. See this `article <https://community.torproject.org/onion-services/advanced/https/>`_ from the Tor Project for more details.
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
.. _faq-general:
|
||||
|
||||
*******
|
||||
General
|
||||
*******
|
||||
***********
|
||||
General FAQ
|
||||
***********
|
||||
|
||||
What is Start9Labs?
|
||||
-------------------
|
||||
|
||||
@@ -1,5 +1,84 @@
|
||||
.. _faq-lightning:
|
||||
|
||||
*********************
|
||||
The Lightning Network
|
||||
*********************
|
||||
*************************
|
||||
The Lightning Network FAQ
|
||||
*************************
|
||||
|
||||
Why would I want to run a lightning node?
|
||||
-----------------------------------------
|
||||
The Lightning Network (LN) is a second 'layer,' built on top of the Bitcoin Protocol. As a result all transactions on LN are backed up by the full security of the Bitcoin network. Lightning is designed for instant payments between nodes, but similar to running a Bitcoin node, running your own is the only way to be sovereign. When you have your own node, you will have the convenience of linking a Lightning wallet, for use on the go. It is also possible to earn an income (granted a very small one at this time), if you are willing to learn how to become a 'routing node.'
|
||||
|
||||
How can I get started with Lightning and open my first channel?
|
||||
---------------------------------------------------------------
|
||||
You can check out our `"Using Lightning" video <https://www.youtube.com/watch?v=rAvoUNsobws>`_ and learn the basics, including opening a channel with Start9.
|
||||
|
||||
.. youtube:: KhU_sTiaN8w
|
||||
|
||||
Please remember to always open a "Private" channel with us, or your channel is likely to be closed. Please don't hesitate to reach out to us with any questions.
|
||||
|
||||
I opened a Lightning channel, but my local balance is lower than I expected. Where is the remainder?
|
||||
-----------------------------------------------------------------------------------------------------
|
||||
A fee to close the channel (onchain) is set aside at opening.
|
||||
|
||||
How is that fee estimation calculated?
|
||||
--------------------------------------
|
||||
The commitment fees are automatically negotiated every few blocks with your peer. They are on chain txs like all channel closes but they are not broadcast until you attempt to close the channel.
|
||||
|
||||
What would happen if I shut down an Embassy that is running a Lightning node with open channels?
|
||||
------------------------------------------------------------------------------------------------
|
||||
It is REALLY IMPORTANT to understand that if Lightning services are shut off for long periods of time (days on end) it is possible for your peers to cheat you out of money. If you are not prepared to LOSE ALL THE MONEY IN YOUR CHANNELS, KEEP YOUR NODE RUNNING.
|
||||
That said, malicious actors on the network right now are probably sparse. However, you are still open to that risk if you do not keep your node online.
|
||||
|
||||
Is there a solution to this?
|
||||
----------------------------
|
||||
Yes, the concept of a Watchtower was originally conceptualized in the LN whitepaper. A Watchtower is simply a lightning node to which you can give the authority to monitor transactions associated with your open payment channels.
|
||||
|
||||
Is it possible to run c-lightning and lnd parallel on the Embassy?
|
||||
------------------------------------------------------------------
|
||||
Yes, you may run both. They will operate in their own environments and allow you to run services that depend on either.
|
||||
|
||||
How do I connect my Spark mobile app to the Embassy Spark server?
|
||||
-----------------------------------------------------------------
|
||||
To use a Spark client, you still need to have Spark installed on the Embassy (which ‘serves’ Spark). Then, under Properties, there is a "Pairing URL". The first part of this is the server URL, and the end portion of it is the access key.
|
||||
|
||||
Unfortunately, Spark cannot currently be used in Consulate. This issue is being tracked `here <https://github.com/Start9Labs/consulate-ios/issues/30>`__.
|
||||
|
||||
Are my addresses, channels, and balances all stored in LND or in RTL?
|
||||
---------------------------------------------------------------------
|
||||
This is all on LND, and RTL is just a GUI for accessing LND. On-chain balance is also part of the LND backup.
|
||||
|
||||
How do I find my LND seed so I can write it down to backup?
|
||||
-----------------------------------------------------------
|
||||
All LND backups are best done via the Embassy backup flow. It is not supported to use a seed as backup; LND does not expose this. Everything crucial is backed up by our backup system so you do not need your seed. The seed is ONLY for the onchain wallet and does not backup your channel state.
|
||||
|
||||
To clarify some of the reasons for this choice:
|
||||
|
||||
First off, Lightning is fundamentally different than on-chain/Layer1(L1) bitcoin. There is no way to compress all of that information down into a single 24 word seed in such a way that it will continue to work throughout your usage of the Lightning Network.
|
||||
|
||||
So, what is the LND seed *for*? In short, the seed is only used for the Layer1 portion of the funds you have locked up in LND. Due to the live nature of LND and lightning nodes in general, we tend to discourage keeping any significant amounts of money in the onchain portion of your wallet. Given that we cannot actually recover the Layer2(L2) funds with that seed, we needed to have a more holistic way to backup LND funds such that the backup would encompass the ability to get L2 funds back. The Embassy backup system does this, and this approach also happens to be a perfectly valid backup of your L1 funds as well. While Bitcoin users have been trained that the 24 word seed can be used to recover all of their funds, it is important to state that lightning does not and cannot work this way. Exposing the seed gives you two separate things to keep track of in order to recover your funds instead of just one.
|
||||
|
||||
Is there a way to use the channel backups made within RTL?
|
||||
----------------------------------------------------------
|
||||
The only backup flow we officially support is through the Embassy backup system. This does include the channel backups created automatically by LND, but it must be understood that backups in Lightning are very different than they are on Layer 1 Bitcoin. If you restore from backup all your channels will close, and there is a potential, albeit small, probability for you to lose funds.
|
||||
|
||||
When attempting to add new peer, RTL says "server is still in the process of starting," but chain state seems to be fully up to date. What can I do?
|
||||
-----------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
Check the LND logs, it can take a while to bootstrap, and starting RTL before this completes could cause errors.
|
||||
|
||||
"Server is still in the process of starting," but LND and RTL are running. How can I address this?
|
||||
---------------------------------------------------------------------------------------------------
|
||||
You may need to restart the LND Service.
|
||||
|
||||
I get the following error from LND: "Error ECONNREFUSED Fetching Info Failed! Unknown Error." What's wrong?
|
||||
-----------------------------------------------------------------------------------------------------------
|
||||
LND is waiting for Bitcoin to completely sync, and then needs to catch up on block scanning itself. This may take several minutes, and in some cases might require a restart of the LND service. Do this if the process takes more than 5-10 minutes.
|
||||
|
||||
What's the best way to move a small lightning balance?
|
||||
------------------------------------------------------
|
||||
It is possible to have lightning balances that are so low that they will not (or barely will) cover the on-chain fees to recoup into an on-chain wallet.
|
||||
|
||||
Why are Lightning Network backups and moves so complicated?
|
||||
-----------------------------------------------------------
|
||||
There are safe ways to do an “atomic move” of a LN node, but it requires a very specific sequence of actions and certain mistakes can result in your counterparties taking all your funds. Currently, LN works on a punishment scheme. This means if you publish revoked state, the counterparty is entitled to a claim on all the funds in the channel. This incentive system is what makes the whole system work. Without it LN would be subject to various kinds of thievery.
|
||||
|
||||
The downside is that backups of old state are not safe. This is because your node might believe it is the real state of the channel, but it may be unaware of states created since then. The problem here is that your node naively believes something different from the truth, which can result in all of the funds being lost. In response to this reality, the safe backup systems, including those generated by RTL, actually do not include channel state. They only list the peers that you had channels with. Restoring these backups essentially politely asks your peers to force close the channels they have with you. In those moments it is possible for your peer to try and cheat you, but they cannot be 100% sure that you can’t punish them, so it’s extremely unlikely that they will attempt to do so.
|
||||
|
||||
@@ -1,5 +1,101 @@
|
||||
.. _faq-services:
|
||||
|
||||
********
|
||||
Services
|
||||
********
|
||||
************
|
||||
Services FAQ
|
||||
************
|
||||
|
||||
My Embassy is set up, now what?
|
||||
-------------------------------
|
||||
You can now access your Embassy and find the Services you want from the "Marketplace" tab, then clicking "Install." The Service will let you know if you need any "dependencies," or pre-requisite Services, first. After you have a Service installed, don't forget to "Start" the service.
|
||||
|
||||
What if I cannot connect to a Service?
|
||||
--------------------------------------
|
||||
Please make sure the service is started by viewing it in the Services tab in the Embassy dashboard menu. A green indicator bar should be visible.
|
||||
|
||||
Can it be used as a firewall?
|
||||
-----------------------------
|
||||
Potentially. The PiHole service is on the roadmap.
|
||||
|
||||
Will there be a VPN?
|
||||
--------------------
|
||||
We are looking into adding as a Wireguard service for VPN access when you are not home. A client-to-client VPN may also be possible.
|
||||
|
||||
Will there be an email server?
|
||||
------------------------------
|
||||
We do hope to add this functionality one day, however it has some technical challenges, and is not currently a high priority. If you would like to tackle this and help us get a self-hosted email server on the Embassy, please reach out in our `Matrix Community Dev Channel <https://matrix.to/#/#community-dev:matrix.start9labs.com>`_, and we will be happy to help in any way that we can.
|
||||
|
||||
Can the Embassy run 'X' Service??
|
||||
---------------------------------
|
||||
Potentially. Here is a `comprehensive list <https://github.com/awesome-selfhosted/awesome-selfhosted>`_ of self-hosted services, any of which can theoretically be run on the Embassy.
|
||||
To get a general idea of what is required of an app, answer these questions:
|
||||
|
||||
1. Is it designed to be self-hosted?
|
||||
2. Can it run on a Raspberry Pi?
|
||||
3. If it has a P2P interface, does that interface support Tor?
|
||||
4. Does it ship with it's own web interface? Or is there a Tor-enabled client app?
|
||||
5. Is there someone willing to put in the time to package it up?
|
||||
|
||||
If all answers are yes, then it can run on EmbassyOS.
|
||||
|
||||
Packing up a service for the Embassy does not require extensive development skills. If you are interested in doing do, please see our service packaging guide :ref:`here <service_package_overview>`.
|
||||
|
||||
We are aggressively moving away from service development in favor of a more community driven approach. Meaning you, an app development team, or anyone else on Earth, can bring the Service they want to the Embassy Marketplace. You don't need our permission.
|
||||
|
||||
Does the Embassy operate as a Tor relay node?
|
||||
---------------------------------------------
|
||||
No, currently it is not, but we plan to add that functionality in the future.
|
||||
|
||||
Are files on File browser encrypted on disk?
|
||||
--------------------------------------------
|
||||
No, not currently.
|
||||
|
||||
Can I use my CUPS instance with other people? How does that work?
|
||||
-----------------------------------------------------------------
|
||||
Cups does not have multiple accounts support. Each person would need their own Embassy. We are considering adding multi-account support to Cups, but it's just not a priority at the moment.
|
||||
|
||||
How can I fix issues with Sphinx?
|
||||
---------------------------------
|
||||
If you are on Android, make sure Orbot is setup correctly, and if it is, try to restart it or your device. If you still have issues, *back up your keys,* delete all app data from your phone, uninstall, restart the Sphinx service on your Embassy, then reinstall and import your keys.
|
||||
|
||||
I get an error ("Unlock Wallet Failed") when trying to log in to RTL, what can I do?
|
||||
------------------------------------------------------------------------------------
|
||||
Stop and Restart the Service.
|
||||
|
||||
What is happening if I cannot connect with another user on Mastodon?
|
||||
--------------------------------------------------------------------
|
||||
You can only follow someone who has an account on a Mastodon server that supports Tor. It is a new feature, so many instances do not have it yet.
|
||||
Other issues are typically related to the tor connection, check your tor daemon, orbot, or try to restart the service.
|
||||
|
||||
Can the browser extension be used with Bitwarden hosted on the embassy?
|
||||
-----------------------------------------------------------------------
|
||||
Yes, but only in a tor-enabled browser. Just add your .onion address as the server in the extension. Make sure that http:// is at the beginning, and NOT https://, as this will not work.
|
||||
|
||||
I want to use BTCPayServer on my website, but Tor is the only option, how can visitors access my BTCPay on clearnet?
|
||||
--------------------------------------------------------------------------------------------------------------------
|
||||
As the Embassy produces a Tor Hidden Service for each service, BTCPayServer is only available via Tor by default. For a brick and mortar business, this is no problem as you can use your own device for a customer to pay you on. If you run your own website, it is possible to set up a reverse proxy in order to serve BTCPay content to your clearnet visitors. A guide to doing this is available in the `BTCPayServer docs <https://docs.btcpayserver.org/ReverseProxyToTor/>`_.
|
||||
|
||||
We understand that this can be a frustrating limitation, and adding clearnet support is high on our list of priorities for the Embassy. This will allow a number of services to have better interoperability with the broader Web.
|
||||
|
||||
I'm having issues connecting to users or rooms in Matrix/Synapse, what can I do?
|
||||
--------------------------------------------------------------------------------
|
||||
Most issues in Matrix will be due to improper setup, or tor connectivity issues. Please follow the directions in the Synapse web interface closely, and be sure that you have a good tor connection on the device you are trying to connect with. As with all Tor addresses, make sure you are using http:// as a prefix (some apps will automatically prefix https://.
|
||||
|
||||
Please reach out to us if you are still unable to connect.
|
||||
|
||||
My Element desktop client stopped working after an OS update, what is happening?
|
||||
--------------------------------------------------------------------------------
|
||||
If you had to create a custom destkop shortcut, it is likely that this was reset with the system update, so you'll just need to remake it.
|
||||
|
||||
I don't see an answer to my question regarding a certain service. Is there more documentation?
|
||||
-----------------------------------------------------------------------------------------------
|
||||
While we are intent on providing the most friendly experience possible to our customers, ultimately it will be impossible for Start9 to create documentation and tutorials for every service we make available on the Embassy. Each service *should* have its own documentation produced by the service developers themselves, and we will do our best keep track, consolidate, and link to it. Also, much of the reason good tutorials don't exist is simply because no one in the community has taken the time to produce it. If you come across something useful or write something up yourself, please let us know and we will promote it. Otherwise we will do our best to answer questions as they arise and gradually build out tutorials where they are lacking.
|
||||
|
||||
I want to understand in depth how a Service works and it's available configuration options. Where can I go to learn more?
|
||||
--------------------------------------------------------------------------------------------------------------------------
|
||||
Depending on the app, the config options can be quite involved. Bitcoin Core, for example, has an enormous amount of complex options, almost none of which are useful to a normal user doing normal things. We chose some very sane defaults that should work for normal use cases. Here is an example config from the Bitcoin `GitHub <https://github.com/bitcoin/bitcoin/blob/master/share/examples/bitcoin.conf>`_.
|
||||
|
||||
By reading the descriptions in the link above, as well as doing some extra searching on your favorite search engine, you can begin to discover all the crazy ways in which someone can customize their Bitcoin node. Here is another list of `possible options <https://en.bitcoinwiki.org/wiki/Running_Bitcoind>`_.
|
||||
|
||||
We translated much of (but not all of) the tons of options into a clean and easy-to-use GUI with toggles, dropdowns, inputs, etc, which is what you're seeing in your config screen. If you notice the little "?" icons on the left of each option, clicking them will provide a brief description as to what the option does. Also, our config GUI restricts the possible values you can enter such that you don't accidentally crash Bitcoin. That said, be very careful about just randomly changing things, lest your node starts to behave strangely.
|
||||
|
||||
You can also check out our :ref:`Service Config Spec <service_config>` documentation for further details.
|
||||
|
||||
65
source/knowledgebase/faq/faq-troubleshooting.rst
Normal file
65
source/knowledgebase/faq/faq-troubleshooting.rst
Normal file
@@ -0,0 +1,65 @@
|
||||
.. _faq-troubleshooting:
|
||||
|
||||
*****************************
|
||||
Setup and Troubleshooting FAQ
|
||||
*****************************
|
||||
|
||||
What do I do first?
|
||||
-------------------
|
||||
Simply plug the device into power and internet, most easily by using an empty ethernet port on your home internet router. That's it! After this, get the :ref:`Setup App <initial-setup>`, and follow the instructions.
|
||||
|
||||
How do I know if my Embassy is running?
|
||||
---------------------------------------
|
||||
After plugging into power and your router, you will hear 2 distinct sounds: first, a “bep” ‐ indicating the device is powering on, and second, a “chime” ‐ indicating the device is ready for setup.
|
||||
|
||||
My Embassy is really hot! Is this normal?
|
||||
------------------------------------------
|
||||
Yes, the Embassy's case is actually doing 'double duty' as a heat sync. This means that the metal of the case is actually touching the chips on the circuit board and drawing their heat out and away. This is known as "passive cooling," as no fan (and therefore no additional energy) is required to cool the system.
|
||||
|
||||
What if I can't connect to my Embassy?
|
||||
--------------------------------------
|
||||
Please ensure your phone / computer is connected to the same wired or wireless network as your Embassy. Be careful that you are not on a separate or "guest" network.
|
||||
|
||||
Why do I need the Bonjour service (Windows)?
|
||||
--------------------------------------------
|
||||
Because a major use case of Bonjour is wireless printing over the LAN, but your Windows machine can also use Bonjour to discover and connect with other devices on the LAN. In this case the Embassy.
|
||||
|
||||
My Tor sites aren't loading, what should I do?
|
||||
----------------------------------------------
|
||||
This is most likely a transient networking issue that will correct itself in a few minutes to an hour. If it does not, there are few things you can try:
|
||||
|
||||
1. On Android/Orbot, the most common solution is to restart your Android device.
|
||||
|
||||
2. Access your Embassy over :ref:`LAN <ssl-setup>` and restart it from the "Embassy" menu.
|
||||
|
||||
3. Restart your router.
|
||||
|
||||
Do I need to take any additional security precautions with my device, for example with my router/modem?
|
||||
-------------------------------------------------------------------------------------------------------
|
||||
Nothing special is required, however, it is best practice to use good passwords, i.e. for your WiFi and your Embassy. Here's a `comic <https://xkcd.com/936/>`_ explaining how to make strong passwords, simply.
|
||||
|
||||
What if I have an unique network issue, for example, with a firewall?
|
||||
---------------------------------------------------------------------
|
||||
The Embassy is designed to work as simply as possible, for as many as possible, while providing the ability to self-host in a private manner. If you have an agressive or custom firewall, or other custom network settings, there is a good chance that addtional configuration may be necessary. We will continue to learn about custom networking issues, update our docs with resources, and help in the community :ref:`channels <contact>` to the best of our ability.
|
||||
|
||||
Can I use the Embassy from behind a VPN, for example, if my router has a built-in VPN?
|
||||
--------------------------------------------------------------------------------------
|
||||
While this is possible, it adds complexity, which may lead to problems. You will need to understand the setup of your router/VPN and how it supports (or doesn't support) tor connections.
|
||||
|
||||
If you are having trouble with this, you might consider letting the Embassy out "in the clear," since everything is broadcast exclusively across the Tor network, offering a high level of privacy.
|
||||
|
||||
Why am I having trouble using my Embassy via the Brave browser?
|
||||
---------------------------------------------------------------
|
||||
Unfortunately, Brave does not treat .onion addresses in a 'secure context.' This is a known issue in Brave that is being tracked `here <https://github.com/brave/brave-browser/issues/13834>`_.
|
||||
|
||||
I'm getting this error: The shell command "apt-get update" returned a failure exit code: 100. What do I do?
|
||||
------------------------------------------------------------------------------------------------------------
|
||||
This has been fixed in newer updates. Please first make sure to update to the latest EOS version (2.16 or higher). If this does not work, please :ref:`contact us <contact>`.
|
||||
|
||||
Is it true that iOS has some limited functionality in regard to the Embassy?
|
||||
----------------------------------------------------------------------------
|
||||
The short answer is yes, but not much. Unfortunately, Apple does not allow any ability for Tor to run in the background (everything on the Embassy runs over Tor). Most of your Embassy services can be run with Tor-native apps, inside Consulate, or with another Tor browser, with the exception of RTL, Spark, and Matrix. Zap and Zeus wallets can be used in place of RTL/Spark, and we hope a Tor-native Element client will be available soon to allow for the use of Matrix.
|
||||
|
||||
I'm having trouble using Firefox for Tor addresses on Lineage, what can I do?
|
||||
-----------------------------------------------------------------------------
|
||||
Unfortunately, there seems to be a bug in Lineage that makes using Firefox over Tor currently unusable. Currently, this feature works fine on Calyx and Graphene.
|
||||
@@ -9,7 +9,8 @@ An overview of EmbassyOS general capabilities.
|
||||
|
||||
faq-general
|
||||
faq-basic-use
|
||||
faq-troubleshooting
|
||||
faq-embassy
|
||||
faq-services
|
||||
faq-bitcoin
|
||||
faq-lightning
|
||||
faq-lightning
|
||||
Reference in New Issue
Block a user