tollgate-module-basic-go v0.6.0 — Cashu-paid WiFi that doesn't trust your MAC
The go implementation has seen, 250 commits since v0.5.0 — and there are multiple TollGate clients now speaking the protocol.
🔐 Identity is the TCP socket. No more trusting client-claimed MACs — forged identities can't borrow your session, and MAC rotation can't reset the meter or stretch paid time.
💰 Money safety. A payment refused during a mint outage never burns your token. Critical Cashu races fixed (swap counter, keyset rotation, V2 swap crash). Payment panics contained instead of killed.
🪪 One key, one identity. Unified NIP-06 mnemonic recovery: npub, CGNAT address, per-interface MACs, root and management-WiFi passwords — all derived from 12 words.
🌐 Portal that just works. Decoupled from nodogsplash, reachable pre-auth, smooth post-payment redirect.
▶️ Install (2 min):
▶️ Captive portal + payment:
▶️ Config UI:
Try it on your own router:
bash <(curl -fsSL https://raw.githubusercontent.com/OpenTollGate/tollgate-installer/main/install-and-test.sh)
🛠 Releases without GitHub runners. Build + release pipeline runs on Nostr CI. Reproducible builds. VM acceptance lane + Docker cloud-lab (live mint zoo, keyset rotation, fee mints).
Also: SSRF hardening, LAN-only API firewall, RFC 1918 isolation, spending-condition token rejection.
📦 Download: https://github.com/OpenTollGate/tollgate-module-basic-go/releases/tag/v0.6.0
#bitcoin #cashu #nostr #opensource
TollGate
npub1zz…wljrv
2026-10-21 03:36:54 UTC
Author Public Key
npub1zzt0d0s2f4lsanpd7nkjep5r79p7ljq7aw37eek64hf0ef6v0mxqgwljrvSeen on
wss://nostr.chaima.infoPublished at
2026-10-21 03:36:54 UTCEvent JSON
{
"id": "d5aabecb2cff0c843043b1cbcf76c7a99eb605d831b413c09730db99357ddf02",
"pubkey": "1096f6be0a4d7f0ecc2df4ed2c8683f143efc81eeba3ece6daadd2fca74c7ecc",
"created_at": 1792553814,
"kind": 1,
"tags": [
[
"t",
"bitcoin"
],
[
"t",
"cashu"
],
[
"t",
"nostr"
],
[
"t",
"opensource"
],
[
"r",
"https://blossom2.orangesync.tech/b685203b9744d67e175ed36093482a64ded2669721e90847555522b17ff49698.mp4"
],
[
"r",
"https://blossom2.orangesync.tech/1961106d3a4e525b64c3155a9bc9062f5bd5f04239f90ff5ad45642fb736061f.mp4"
],
[
"r",
"https://blossom2.orangesync.tech/b03c4017e19cc592d9d71de1d62877820b9b6947b8767df6f1c801ad227a692d.mp4"
],
[
"r",
"https://raw.githubusercontent.com/OpenTollGate/tollgate-installer/main/install-and-test.sh)"
],
[
"r",
"https://github.com/OpenTollGate/tollgate-module-basic-go/releases/tag/v0.6.0"
]
],
"content": "tollgate-module-basic-go v0.6.0 — Cashu-paid WiFi that doesn't trust your MAC\n\nThe go implementation has seen, 250 commits since v0.5.0 — and there are multiple TollGate clients now speaking the protocol.\n\n🔐 Identity is the TCP socket. No more trusting client-claimed MACs — forged identities can't borrow your session, and MAC rotation can't reset the meter or stretch paid time.\n\n💰 Money safety. A payment refused during a mint outage never burns your token. Critical Cashu races fixed (swap counter, keyset rotation, V2 swap crash). Payment panics contained instead of killed.\n\n🪪 One key, one identity. Unified NIP-06 mnemonic recovery: npub, CGNAT address, per-interface MACs, root and management-WiFi passwords — all derived from 12 words.\n\n🌐 Portal that just works. Decoupled from nodogsplash, reachable pre-auth, smooth post-payment redirect.\n\n▶️ Install (2 min): https://blossom2.orangesync.tech/b685203b9744d67e175ed36093482a64ded2669721e90847555522b17ff49698.mp4\n▶️ Captive portal + payment: https://blossom2.orangesync.tech/1961106d3a4e525b64c3155a9bc9062f5bd5f04239f90ff5ad45642fb736061f.mp4\n▶️ Config UI: https://blossom2.orangesync.tech/b03c4017e19cc592d9d71de1d62877820b9b6947b8767df6f1c801ad227a692d.mp4\n\nTry it on your own router:\n\nbash \u003c(curl -fsSL https://raw.githubusercontent.com/OpenTollGate/tollgate-installer/main/install-and-test.sh)\n\n🛠 Releases without GitHub runners. Build + release pipeline runs on Nostr CI. Reproducible builds. VM acceptance lane + Docker cloud-lab (live mint zoo, keyset rotation, fee mints).\n\nAlso: SSRF hardening, LAN-only API firewall, RFC 1918 isolation, spending-condition token rejection.\n\n📦 Download: https://github.com/OpenTollGate/tollgate-module-basic-go/releases/tag/v0.6.0\n\n#bitcoin #cashu #nostr #opensource",
"sig": "629573bd1a2dcec6f893578ab77155f7b20736dd844488b792d01bdb5352f2dbb407ae5231471c7e76fa25d968e23f688729b3c5ba0c35afc2b798b936de7ab9"
}