nix-bitcoin/docs/usage.md

Updating
---
Run `git pull` in the nix-bitcoin directory, enter the nix shell with `nix-shell` and redeploy with `nixops deploy -d bitcoin-node`.

## Verifying GPG Signatures (recommended)
1. Import jonasnick's gpg key

	```
	gpg2 --receive-key 36C71A37C9D988BDE82508D9B1A70E4F8DCD0366
	```

2. Trust jonasnick's gpg key
	
	```
	gpg2 --edit-key 36C71A37C9D988BDE82508D9B1A70E4F8DCD0366
	trust
	4
	quit
	```

3.  Verify commit after `git pull`

	```
	git verify-commit <hash of latest commit>
	```

Nodeinfo
---
Run `nodeinfo` to see your onion addresses for the webindex, spark, etc. if they are enabled.

Connect to spark-wallet
---
1. Enable spark-wallet in `configuration.nix`
	
	Change 
	```
	# services.spark-wallet.enable = true;
	```
	to 
	```
	services.spark-wallet.enable = true;
	```

2. Deploy new `configuration.nix`

	```
	nixops deploy -d bitcoin-node
	```

3. Get the onion address, access key and QR access code for the spark wallet android app

	```
	journalctl -eu spark-wallet
	```
	Note: The qr code might have issues scanning if you have a light terminal theme. Try setting it to dark or highlightning the entire output to invert the colors.

4. Connect to spark-wallet android app

	```
	Server Settings
	Scan QR
	Done
	```

Connect to electrs
---
1. Enable electrs in `configuration.nix`
	
	Change 
	```
	# services.electrs.enable = true;
	```
	to 
	```
	services.electrs.enable = true;
	```

2. Deploy new `configuration.nix`

	```
	nixops deploy -d bitcoin-node
	```

3. Get electrs onion address

	```
	nodeinfo | grep 'ELECTRS_ONION'
	```

4. Connect to electrs

	On electrum wallet machine
	```
	electrum --oneserver --server=<ELECTRS_ONION>:50001:t
	```

Connect to nix-bitcoin node through ssh Tor Hidden Service
---
1. Run `nodeinfo` on your nix-bitcoin node and note the `SSHD_ONION`

	```
	nixops ssh operator@bitcoin-node
	nodeinfo | grep 'SSHD_ONION'
	```

2. Create a SSH key 

	```
	ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519
	```

3. Place the ed25519 key's fingerprint in the `configuration.nix` `openssh.authorizedKeys.keys` field like so

	```
	# FIXME: Add your SSH pubkey
	services.openssh.enable = true;
	users.users.root = {
	  openssh.authorizedKeys.keys = [ "[contents of ~/.ssh/id_ed25519.pub]" ];
	};
	```

4. Connect to your nix-bitcoin node's ssh Tor Hidden Service, forwarding a local port to the nix-bitcoin node's ssh server

	```
	ssh -i ~/.ssh/id_ed25519 -L [random port of your choosing]:localhost:22 root@[your SSHD_ONION]
	```

5. Edit your `network-nixos.nix` to look like this

	```
	{
	  bitcoin-node =
	    { config, pkgs, ... }:
	    { deployment.targetHost = "127.0.0.1";
	    deployment.targetPort = [random port of your choosing];
	    };
	}
	```

6. Now you can run `nixops deploy -d bitcoin-node` and it will connect through the ssh tunnel you established in step iv. This also allows you to do more complex ssh setups that `nixops ssh` doesn't support. An example would be authenticating with [Trezor's ssh agent](https://github.com/romanz/trezor-agent), which provides extra security.