🎁 Get the FREE AI Skills Starter Guide β€” Subscribe β†’
BytesAgainBytesAgain
πŸ¦€ ClawHub

Lightning Security Module

by @roasbeef

Set up an lnd remote signer container that holds private keys separately from the agent. Exports a credentials bundle (accounts JSON, TLS cert, admin macaroon) for watch-only litd nodes. Container-first with Docker, native fallback. Use when firewalling private key material from AI agents.

βš™οΈ Configuration

Container Config

The signer compose template is at skills/lightning-security-module/templates/docker-compose-signer.yml. Config is passed via command-line arguments.

Native Config

The native signer config template is at skills/lightning-security-module/templates/signer-lnd.conf.template. Key differences from a standard lnd node:

  • No P2P listening (--listen=) β€” signer doesn't route
  • RPC on 0.0.0.0:10012 β€” accepts connections from watch-only node
  • REST on localhost:10013 β€” local only, for wallet creation
  • TLS extra IP 0.0.0.0 β€” watch-only on a different machine can connect
  • No autopilot, no routing fees β€” signer is signing-only
  • View on ClawHub
    TERMINAL
    clawhub install lightning-security-module

    πŸ§ͺ Use this skill with your agent

    Most visitors already have an agent. Pick your environment, install or copy the workflow, then run the smoke-test prompt above.

    πŸ” Can't find the right skill?

    Search 60,000+ AI agent skills β€” free, no login needed.

    Search Skills β†’