lightning-loop: allow RPC access from main netns

Note that this also exposes the REST server, which is secured by
macaroon auth like the RPC server.
This commit is contained in:
Erik Arvstedt 2020-10-29 21:20:37 +01:00
parent d76b080b74
commit 8da01fe8a6
No known key found for this signature in database
GPG key ID: 33312B944DD97846
3 changed files with 2 additions and 4 deletions

View file

@ -74,14 +74,13 @@ in {
};
cli = mkOption {
default = pkgs.writeScriptBin "loop" ''
${cfg.cliExec} ${cfg.package}/bin/loop \
${cfg.package}/bin/loop \
--rpcserver ${rpclisten} \
--macaroonpath '${cfg.dataDir}/${network}/loop.macaroon' \
--tlscertpath '${secretsDir}/loop-cert' "$@"
'';
description = "Binary to connect with the lightning-loop instance.";
};
inherit (nix-bitcoin-services) cliExec;
enforceTor = nix-bitcoin-services.enforceTor;
};