Join Nostr
2026-10-26 22:24:43 UTC
in reply to

Josh on Nostr: Yes, running my own: - Signer: Favilla KEY, my own hardware signer (ESP32-S3 + ...

Yes, running my own:

- Signer: Favilla KEY, my own hardware signer (ESP32-S3 + STM32G0 + SE051). Keys born on the device, only signatures leave. NIP-46 to other clients, direct API to my PWA. User-editable relay list feeds the bunker URL.

- Clients: my own PWA served off the signer, plus a web portal. My relay first, public relays as failover.

- Relay: strfry + nginx + Let's Encrypt at relay.favillakey.io, same VPS as coturn. Python write policy with a synced allow-list and an open/owners mode switch.

- Fan-out: strfry router to public relays, kinds 1/1888/1889/10002 only, so gift wraps never leave the box.

- Calls: coturn, signalling over the relay.

- Lesson: an ordering bug in the policy plugin made the open relay free DM storage for the network. 420k foreign gift wraps, full disk in six weeks. Fixed.