Запуск узла Monero на VPS с Debian 13

apt update
apt install -y ca-certificates curl bzip2 gnupg jq

uname -m
df -h /
free -h

install -d -m 0700 /root/monero-download
cd /root/monero-download

MONERO_VERSION=0.18.5.4
MONERO_ARCHIVE="monero-linux-x64-v${MONERO_VERSION}.tar.bz2"

curl --fail --location --output "$MONERO_ARCHIVE" \
  "https://downloads.getmonero.org/cli/$MONERO_ARCHIVE"
curl --fail --location --output hashes.txt \
  https://www.getmonero.org/downloads/hashes.txt
curl --fail --location --output binaryfate.asc \
  https://raw.githubusercontent.com/monero-project/monero/master/utils/gpg_keys/binaryfate.asc

gpg --show-keys --with-fingerprint binaryfate.asc

81AC 591F E9C4 B65C 5806 AFC3 F0AF 4D46 2A0B DF92

gpg --import binaryfate.asc
gpg --verify hashes.txt

awk -v file="$MONERO_ARCHIVE" '$2 == file {print}' hashes.txt > selected-hash.txt
test "$(wc -l < selected-hash.txt)" -eq 1 && sha256sum --check selected-hash.txt

tar -xjf "$MONERO_ARCHIVE"
install -d -o root -g root -m 0755 /opt/monero
install -o root -g root -m 0755 \
  "monero-x86_64-linux-gnu-v${MONERO_VERSION}/monerod" /opt/monero/monerod

/opt/monero/monerod --version

useradd --system --user-group --home-dir /var/lib/monero \
  --no-create-home --shell /usr/sbin/nologin monero

install -d -o root -g monero -m 0750 /etc/monero
install -d -o monero -g monero -m 0750 /var/lib/monero /var/log/monero

cat > /etc/monero/monerod.conf <<'EOF'
data-dir=/var/lib/monero
log-file=/var/log/monero/monerod.log
log-level=0
max-log-file-size=20971520
max-log-files=5

prune-blockchain=1
sync-pruned-blocks=1
max-concurrency=2

p2p-bind-ip=0.0.0.0
p2p-bind-port=18080
hide-my-port=0
in-peers=32
out-peers=12
igd=disabled

rpc-bind-ip=127.0.0.1
rpc-bind-port=18081
rpc-restricted-bind-ip=127.0.0.1
rpc-restricted-bind-port=18089
no-zmq=1

enable-dns-blocklist=1
check-updates=disabled
limit-rate-down=32768
limit-rate-up=1024
EOF

chown root:monero /etc/monero/monerod.conf
chmod 0640 /etc/monero/monerod.conf
runuser -u monero -- test -r /etc/monero/monerod.conf

apt install -y ufw
ufw allow 22/tcp comment 'SSH'
ufw allow 18080/tcp comment 'Monero P2P'
ufw default deny incoming
ufw default allow outgoing
ufw enable
ufw status verbose

cat > /etc/systemd/system/monerod.service <<'EOF'
[Unit]
Description=Monero node
Wants=network-online.target
After=network-online.target

[Service]
Type=simple
User=monero
Group=monero
WorkingDirectory=/var/lib/monero
ExecStart=/opt/monero/monerod --config-file /etc/monero/monerod.conf --non-interactive
Restart=on-failure
RestartSec=15
KillSignal=SIGINT
TimeoutStopSec=300
LimitNOFILE=65536
UMask=0077
NoNewPrivileges=true
PrivateTmp=true
PrivateDevices=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/monero /var/log/monero

[Install]
WantedBy=multi-user.target
EOF

systemd-analyze verify /etc/systemd/system/monerod.service
systemctl daemon-reload
systemctl enable --now monerod.service
systemctl status monerod.service --no-pager

ss -lntp | grep -E ':(18080|18081|18089)\b'

tail -f /var/log/monero/monerod.log

journalctl -u monerod.service -n 50 --no-pager

curl --fail --silent --show-error http://127.0.0.1:18081/get_info \
  | jq '{status, height, target_height, synchronized, busy_syncing,
         incoming_connections_count, outgoing_connections_count}'

df -h /var/lib/monero
du -sh /var/lib/monero/lmdb
free -h

ssh -N -T -o ExitOnForwardFailure=yes -o ServerAliveInterval=30 \
  -L 127.0.0.1:18089:127.0.0.1:18089 YOUR_SSH_USER@YOUR_VPS_IP

curl --fail --silent --show-error http://127.0.0.1:18089/get_info