Yes, running my own:
- Signer: Favilla KEY, my own hardware signer (ESP32-S3 + STM32G0 + SE051). Keys born on the device, only signatures leave. NIP-46 to other clients, direct API to my PWA. User-editable relay list feeds the bunker URL.
- Clients: my own PWA served off the signer, plus a web portal. My relay first, public relays as failover.
- Relay: strfry + nginx + Let's Encrypt at relay.favillakey.io, same VPS as coturn. Python write policy with a synced allow-list and an open/owners mode switch.
- Fan-out: strfry router to public relays, kinds 1/1888/1889/10002 only, so gift wraps never leave the box.
- Calls: coturn, signalling over the relay.
- Lesson: an ordering bug in the policy plugin made the open relay free DM storage for the network. 420k foreign gift wraps, full disk in six weeks. Fixed.
