monerod-node-vps

Ansible tool to create/manage public Monero nodes.

The purpose of this project is to simplify the creation and maintenanceof public Monero nodes; specially on virtual private servers, but in generalon any linux machine where you have access. Where maintenance involves thefollowing tasks:

• Upgrading Monero version.
• Enabling, disabling and updating flags passed to monerod.
• Extending disk space allocated to store the blockchain.

The project aims to:

• Be as simple as possible.
• By default, produce a node that seeds the blockchain (public node).
• Produce a secure and stable setup.
• Produce an inexpensive setup by default.
• Make maintenance as easy as posible.
• Allow creating mainnet, stagenet or testnet nodes.

The project doesn't intend to produce a setup optimized for mining.

Requirements

• Python
• Ansible
• Ansible collections defined in requirements.yml. Install with the following command:

ansible-galaxy install -r requirements.yml

You also need the appropriate API Keys for the VPS provider (Hetzner, DigitalOcean and Vultr only,for the time being), and public SSH key to setup in the server.

Long term goals

• Extend to be able to setup nodes in other VPS providers, besides Hetzner, DigitalOcean and Vultr
• Tor setup.
• Maybe include automated CI setup.

Usage

1. Set up the following environment variables

   • HETZNER_API_KEY, if you intend to create/manage nodes on Hetzner cloud (by default, this project attempts to create 1 node on Hetzner)
   • DO_API_KEY, if you intend to create/manage nodes on DigitalOcean
   • VULTR_API_KEY, if you intend to create/manage nodes on Vultr
   • PUBLIC_SSH_KEY_NAME
   • PUBLIC_SSH_KEY

2. Run

   • ansible-playbook -i hosts.yml setup-nodes.yml to set up your configured nodes

That should create:

• 1 public Monero mainnet node, on Hetzner cloud.
• Running on the smallest server type (cx11: 1vcpu, 2gb ram)
• With a 50GB volume attached
• Keeping a pruned blockchain
• It'd expose port 22 for ssh, port 18080 for p2p, and port 18089 for restricted RPC

The estimated cost of this setup is less than 6€/month

Further configuration can be achieved via other environment variables (they'relisted below), and through hosts.yml file (see EXAMPLES.md for reference)

Environment variables reference

• HETZNER_API_KEY: Your API key for Hetzner. It's necessary if you configuredthe creation/maintenance of nodes on Hetzner cloud (which is the case, by default).It should be an API key with read and write permissions.

• DO_API_KEY: Your API key for DigitalOcean. It's necessary if you configuredthe creation/maintenance of nodes on DigitalOcean cloud.It should be an API key with read and write permissions.

• VULTR_API_KEY: Your API key for Vultr. It's necessary if you configuredthe creation/maintenance of nodes on Vultr cloud.

• PUBLIC_SSH_KEY_NAME: A name for your public SSH key in Hetzner

• PUBLIC_SSH_KEY: Your public SSH key. It'd be created in Hetzner andembedded in your node; to be able to set up the node, and access itin general.

• NETWORK_FLAG:

  • Empty by default, which indicates mainnet
  • --stagenet
  • --testnet

• HETZNER_REGION: The Hetzner datacenter where the node should be created.Defaults to fsn1. See this for context

• HETZNER_SERVER_TYPE: The type of Hetzner server to create for the node.Defaults to cx11, which is the smallest available. See Prices Sectionhere

• HETZNER_IMAGE: The Hetzner machine image to use on the server. Defaultsto ubuntu-20.04.

• HETZNER_VOLUME_GB_SIZE: The size of he volume that will hold the blochain,expressed in gb. Defaults to 50

• DO_REGION: The DigitalOcean datacenter where the node should be created.Defaults to nyc1. See this for context

• DO_SERVER_TYPE: The type of DigitalOcean droplet to create for the node.Defaults to s-1vcpu-2gb, which is the smallest available with 2gb RAM.See prices section here

• DO_IMAGE: The DigitalOcean machine image to use on the server. Defaultsto ubuntu-20-04-x64

• DO_VOLUME_GB_SIZE: The size of the volume that will hold the blockchain,expressed in gb. Defaults to 50

• VULTR_REGION: The Vultr region where the node should be created. Defaults toNew Jersey, because that's the only Vultr region that supports volumes.

• VULTR_SERVER_TYPE: The type of Vultr server to create for the node. Defaultsto 2048 MB RAM,55 GB SSD,2.00 TB BW. Check the server types offered by Vultrhere

• VULTR_IMAGE: The Vultr machine image to use on the server. Defaults toUbuntu 20.04 x64. Others available listed here

• VULTR_VOLUME_GB_SIZE: The size of the volume that will hold the blockchain,expressed in gb. Defaults to 50

• MONERO_DESIRED_VERSION: The version of Monero that the node should be running.Defaults to v0.17.1.9 at the moment.

• MONERO_DOWNLOAD_URL: The URL where Monero should be downloaded from. Defaultsto https://downloads.getmonero.org/cli/linux64

• MONERO_DOWNLOAD_CHECKSUM: The checksum of the Monero download, to verifyits integrity. Defaults to the checksum of Monero v0.17.1.9 at the moment:sha256:0fb6f53b7b9b3b205151c652b6c9ca7e735f80bfe78427d1061f042723ee6381

• PRUNED_NODE: Whether the node should run a pruned blockchain, tosave disk space. Defaults to True

• ENABLE_DNS_BLOCKLIST: Whether the node should run with --enabled-dns-blocklist.Defaults to True. See thisfor context

• LIMIT_RATE_UP and LIMIT_RATE_DOWN: Limit the upload speed available to the Monero node. Defaults to empty, which means that the default limits configuredby Monero apply.

• OUT_PEERS and IN_PEERS: Limit the number of p2p connections. Defaultsto empty, which applies the default limits configured by Monero.

• MEMORY_MAX: Prevents the node from using more than this amount of RAM.Otherwise it gets restarted. Defaults to 1536M. See systemd's docs forcontext

• MONERO_BAN_LIST_URL: If provided, downloads a list of IPs of Monero nodesto ban. Defaults to empty.

• ANSIBLE_HOST_KEY_CHECKING: Set to False to avoid having to manually confirmthe authenticity of host ssh keys. See this StackOverflowthread for context

Upgrading Monero Version

The envvar MONERO_DESIRED_VERSION governs the version of Monero we wantinstalled on the node. If the version doesn't match, this project downloadsMonero again from MONERO_DOWNLOAD_URL. So, the process of upgrading yournode to the latest version would look like:

1. Set MONERO_DESIRED_VERSION to the latest version
2. Set MONERO_DOWNLOAD_CHECKSUM to the checksum of the version you'redownloading. This is provided on Monero's website
3. Run this project

Extending the volume allocated to store the blockchain

Simply increasing HETZNER_VOLUME_GB_SIZE, VULTR_VOLUME_GB_SIZE orDO_VOLUME_GB_SIZE should take care of extending the volume and the filesystem, for nodes hosted on Hetzner, Vultr and DigitalOcean, respectively.

Allocating more network resources

This Reddit thread suggests that increasingOUT_PEERS, IN_PEERS, LIMIT_RATE_UP, LIMIT_RATE_DOWN would increasethe node's contribution to the network, by connecting to more peers, acceptingconcurrent connections from more peers, and allocating more up/down bandwithto the node.

The setup suggested in that thread can be achived with:

• OUT_PEERS=512
• IN_PEERS=512
• LIMIT_RATE_UP=92160
• LIMIT_RATE_DOWN=92160

The extra traffic might generate additional costs though. Check Pricing section of:

• https://www.hetzner.com/cloud
• https://www.digitalocean.com/docs/billing/bandwidth/
• https://www.vultr.com/resources/faq/#bandwidthoveragerate