Deploy floonet-rs

Summary. floonet-rs is a fork of nostr-rs-relay: one Rust binary containing the relay, the admission policies, the name authority, and the GoblinPay processor. Three deploy paths, easiest first.

1. Installer + systemd (recommended)

No toolchain needed. The installer drops the prebuilt binary, an environment file, and a hardened systemd unit:

curl -fsSL <floonet-rs installer URL> | sh
sudo systemctl enable --now floonet-rs

The unit ships with the full sandbox set (DynamicUser, ProtectSystem=strict, NoNewPrivileges, and friends; see Hardening). Edit /etc/floonet-rs/config.toml and the environment file, then restart.

Verify:

curl -H 'Accept: application/nostr+json' https://relay.yourdomain/   # NIP-11
curl https://relay.yourdomain/api/v1/health                          # name authority

2. Docker Compose

The repo ships a compose file with the relay and a TLS proxy, mirroring the floonet-strfry unit:

git clone <floonet-rs repo>
cd floonet-rs
cp .env.example .env      # edit: domain, contact, prices if any
docker compose up -d

Containers are non-root with a read-only filesystem except the data volume.

3. From source

git clone <floonet-rs repo>
cd floonet-rs
cargo build --release
./target/release/floonet-rs --config config.toml

Front it with a TLS reverse proxy that forwards X-Real-IP (load-bearing for rate limiting), then follow Configuration.

After deploying

• Confirm the whitelist: publish an allowed kind (persists), then a kind 1 note (dropped). The primary acceptance test.
• Fetch the NIP-11 document and confirm it reads as floonet-rs-relay with a neutral description and no payment wording.
• Add the relay to your wallet and complete a payment end to end.