servo: clightning: node personalization and docs

hosts/by-name/servo/services/cryptocurrencies/clightning.nix

@@ -14,20 +14,30 @@
 # - `lightning-cli listpeers`
 #   should show the new peer, with `connected: true`
 #
+# then, fund the clightning wallet
+# - `lightning-cli newaddr`
+#
 # then, open channels
+# - `lightning-cli connect ...`
+# - `lightning-cli fundchannel <node_id> <amount_in_satoshis>`
+#
+# who to federate with?
 # - a lot of the larger nodes allow hands-free channel creation
 #   - either inbound or outbound, sometimes paid
 # - find nodes on:
-#   - <https://amboss.space>
-#   - <https://mempool.space>
-#   - <https://hashxp.org>
 #   - <https://1ml.com>
+#   - <https://mempool.space/lightning>
+#   - <https://amboss.space>
 #     - tor nodes: <https://1ml.com/node?order=capacity&iponionservice=true>
 # - a few tor-capable nodes which allow channel creation:
 #   - <https://c-otto.de/>
 #   - <https://cyberdyne.sh/>
 #   - <https://yalls.org/about/>
 #   - <https://coincept.com/>
+# - more resources: <https://www.lopp.net/lightning-information.html>
+#
+# teardown:
+# - `lightning-cli withdraw <bc1... dest addr> <amount in satoshis> [feerate]`
 #
 # sanity:
 # - `lightning-cli listfunds`
@@ -71,6 +81,11 @@
 
   systemd.services.clightning.after = [ "tor.service" ];
 
+  # lightning-config contains fields from here:
+  # - <https://docs.corelightning.org/docs/configuration>
+  # - bitcoin-rpcpassword
+  # - alias=nodename
+  # - rgb=rrggbb
   sane.services.clightning.extraConfigFiles = [ config.sops.secrets."lightning-config".path ];
   sops.secrets."lightning-config" = {
     mode = "0600";

secrets/servo/lightning-config.bin

@@ -1,5 +1,5 @@
 {
-	"data": "ENC[AES256_GCM,data:q5byWGXbW0hl/UnAoq5bbM0WRYMGwq/bVFE85kdoAjy3Ef+ONt6TuFe62z2SJzf+gvaPFj5ArcdWViJXSw8FYw==,iv:8RTiIuceL0zqjV6dk1r7j+FvzyWrD1AJOnIU1Z3V6sw=,tag:cSEQUO5DLfYaWO4GWF5slw==,type:str]",
+	"data": "ENC[AES256_GCM,data:39STTj0++6Rn0UL05Vov6c/tdqoZnZJVjQP79tX+iNT6OXnP2NRLqrNRhVX8bkaTWVs7FMnPhUsVemric7sIYRhWV7hMsm3bVTdETtABwaBImQgRBUSQr5DY1pJKCBN8n5roHmk=,iv:Q7FxuDHteoDP37zi125DMm+Ym6NZpbhArMaQYHArM+g=,tag:If+b8FvBQRmz/pZtaDInEA==,type:str]",
 	"sops": {
 		"kms": null,
 		"gcp_kms": null,
@@ -23,8 +23,8 @@
 				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2RGJJNlNUQTIzY0FyRVFY\nSm1zRmtpa20zaXRzZDIwR0FpK3VoT3FpL1ZZCnYrcEVZUHpVQnJmZ2d2WGdYdHNE\nQW0wOUlYeHpMRVo1TGdTRENITExxdncKLS0tIHFuMHIwNjdpVitSTEtsWkNiNjVH\nbGVRK1Racm93RVVnMkI1RThLS3Y3SGcKJVFfcTLMPu2GjkQhGm9gSS7eqzzAVW4e\nLoMh52PZog2/1NrT3KKEqxQ1/XyRcqv1T1oU/xvV6EE9+nj2LEuWog==\n-----END AGE ENCRYPTED FILE-----\n"
 			}
 		],
-		"lastmodified": "2024-01-02T18:22:52Z",
-		"mac": "ENC[AES256_GCM,data:mbnyvMMJgiDTsUTIlIbsyYHB90e3ItLkDs090YukiMzWLD2q1F2u0IfzFaZp+Dn9KMYGd1MD8eRVdT8CtyfdduS5R6C++FAT7Fa7TrFrp921bbJgmdjvsKdcV77eriqoUp2fLghAjaiLJrxJcvDDJTzcPvq5QTCHpCHKfA8enPI=,iv:iHJJL7OE0PzP1ju+gXJyCfaFDZgmWPKwuyNkTYwS4qU=,tag:wXL4JOuBoTecgWlHfcdXtA==,type:str]",
+		"lastmodified": "2024-01-04T21:15:03Z",
+		"mac": "ENC[AES256_GCM,data:/jkrDFN/XELB8xblrwDe0m+brP2Vau8vL08VWS6X04d86f0c2qGcyVXTYgpe6S652PgF7RuC6gS4id3jlwc68XQzZjuDC1c3SxdOd53weo8+BHtyH9lPJqei9a25+7rMTVCaA19zYjENRuJYghs7hrnLSZpTKWgjd4a5a3aXAi4=,iv:rfSSF30sdIZ+9kKPs80P2yaReHmU8dS+TVVY6c3cFTg=,tag:JjFRCJmhnGgR63lEMAqexw==,type:str]",
 		"pgp": null,
 		"unencrypted_suffix": "_unencrypted",
 		"version": "3.8.1"