2.2 KiB
2.2 KiB
Nym node — koopa (koopa-nym)
Podman container koopa-nym runs a nym-node
from nym.com (Nym mixnet / NymVPN network).
Host layout (live): ~/koopa-nym/.
Mirror in this repo: configs/nym/.
| Setting | Value |
|---|---|
| Container | koopa-nym |
| Image | localhost/koopa-nym:latest |
| Default mode | mixnode (safest on a home host; no open-internet exit) |
| Optional modes | entry-gateway, exit-gateway (+ WireGuard for dVPN) — see env |
| Local ID | koopa-nym |
| Data | ~/.nym/nym-nodes/koopa-nym/ inside volume ./data |
| Operator T&Cs | must pass --accept-operator-terms-and-conditions every run |
Ports (host) — avoid Caddy 9000/9001 and Tor 8080
| Role | nym-node default | Host publish |
|---|---|---|
| HTTP API / swagger | 8080 |
9080 |
| Mixnet Sphinx | 1789 |
1789 |
| Verloc | 1790 |
1790 |
| Entry client WS | 9000 |
19000 (only if gateway mode) |
| WireGuard | 51822 |
51822 (only if WG enabled) |
VeciGate / firewall: open only what the chosen mode needs.
Exit-gateway and WireGuard expose the host IP to abuse complaints — read
Nym exit counsel
before enabling.
Files
| File | Role |
|---|---|
Containerfile |
Debian slim + nym-node binary |
entrypoint.sh |
env → nym-node run … |
compose.yml |
podman/docker compose |
.env.example |
non-secret knobs |
container-koopa-nym.service |
systemd --user unit template |
Ops (sketch)
cd ~/koopa-nym # or this mirror
cp .env.example .env # edit PUBLIC_IPS, LOCATION, MODE
podman build -t localhost/koopa-nym:latest -f Containerfile .
podman compose up -d # or podman run …
# bonding: use Nym wallet / harbourmaster; node must accept operator T&Cs
curl -sS http://127.0.0.1:9080/api/v1/roles | jq .
Secrets layout (values in koopa-admin-secrets):
| Live | Secrets mirror |
|---|---|
~/koopa-nym/.env |
koopa-admin-secrets/koopa/home-hernani/koopa-nym/.env |
~/koopa-nym/data/ |
host-only (node identity; not git) |
Path map: koopa-admin-log/SECRETS.md.