I think you should distinguish a full node that invites all the world to connect and a minting wallet node that security is important. The former has no fund and is barely more an empty R-pi on the net. There is not a lot motivation to break into it and default security setting is almost enough (get a good password though). The latter has funds and should have better security but overkill steps discourages adoption.
what I do specifically -
Either use user pi for simplicity or create a user of random name.
Only needed for full node.
[quote]enable ssh keys and disable password login
[/quote]
Keep passwd login for situation when you want to get into the pi without network connection. Do use a strong password.
starting nud -daemon is good enough for me.
I got everything working on my laptop and ftp the data directory (with the database subdirectory) to the pi. The wallet on the pi can be used with the same balance, passwd, and doesn’t need to download the full block chain. Remember to chmod 600 all data files.
see below
peerbox links .bash_history to /dev/null so there is no history
I have made a few scripts since I tend to forget -
start (start the daemon)
./nud -daemon
pass (Type in the password to start minting. There is no prompt! the password shows! type password, press return, press control-D)
./nud walletpassphrase `cat` 999999999 true
setfeed (set datafeed)
./nud setdatafeed https://...
nofeed (set no datafeed)
./nud setdatafeed ""
novote (clear all vote)
./nud setvote "{}"
I also have these aliases in .bashrc for status, logfile, pi temperature, recent blocks
alias g=’~/.nu/nud getinfo’
alias deb=‘less ~/.nu/debug.log’
alias temp=’/opt/vc/bin/vcgencmd measure_temp’
alias tx=’~/.nu/nud listtransactions | less’