The Assault on Individual Sovereignty

The pattern is clear: centralisation advances with every crisis. Here are concrete steps to fortify your sovereignty, your infrastructure, and your node in uncertain times.
The Assault on Individual Sovereignty

How to Shield Your Node in Times of Pressure

By Omar-VgWs

The pattern repeats itself

Whatever the situation presenting itself today β€”political, economic, regulatory, or socialβ€” the diagnosis is relatively clear for those who observe carefully: individual sovereignty, genuine civic participation, and support for decentralisation are under siege.

The free individual, financial peace, the ability to decide over one’s own assets without coercive intermediaries… all these principles appeared vulnerable. And, as occurred during the COVID season (2020–2023) β€”when the health emergency served as a pretext to restrict fundamental liberties and accelerate centralised controlβ€” that perceived β€œvulnerability” was exploited. The excuse changes; the mechanism remains the same.

Now, those very pillars are being assailed head-on.

What can be observed

Recognising the pattern is the first step towards responding with intelligence:

  • Progressive centralisation. Every crisis becomes the perfect justification to concentrate power, regulate what was once free, and shackle what was once autonomous.
  • The narrative of fear. The idea takes hold that decentralisation is dangerous, that the individual requires guardianship, that β€œsomeone” must manage what we once managed for ourselves.
  • Silent suffocation. Sometimes all it takes is an ambiguous regulation, a selective tax, an access restriction, or a smear campaign to erode the ground beneath our feet.

The lesson of 2020–2023 is valuable and clear: what you defend in calm times, you preserve in times of urgency. What you neglect, is taken from you.

Adjustments and procedures: strengthen your node

Faced with this landscape, the diagnosis finds its purpose when translated into action. Below, I share a series of adjustments and procedures so that you may strengthen your node β€”your space of autonomy, your personal infrastructure, your sphere of sovereign decision-makingβ€” to the extent that is possible.

1. Review your sovereignty infrastructure

  • Diversify the custody of your assets: avoid depending on a single intermediary.
  • Seek redundancy for your node (network, information, communication).
  • Self-custody, self-responsibility, self-verification.

2. Reduce your exposure surface

  • Minimise the surrender of unnecessary personal data.
  • Review permissions, subscriptions, and digital dependencies you can simplify.
  • Every point of dependency you remove is a door you reclaim.

3. Strengthen your decentralised network

  • Support local, community-driven, open-source projects.
  • Forge bonds with people who share these principles. Decentralisation is distribution, connection, community.
  • Share knowledge. A node that communicates multiplies.

4. Document and back up

  • Make backups of everything you consider essential: information, keys, documents, projects.
  • Preserve your memory on your own terms.

5. Keep a cool head

  • The assault seeks impulsive reaction, panic, paralysis. You can choose strategic calm.
  • Inform yourself through diverse sources. Question with genuine curiosity.
  • Act from serenity and clarity.

Practical configurations: StartOS and Umbrel

For those who run their own node and wish to bring these principles into concrete infrastructure, I share two specific breakdowns depending on the configuration you use.

StartOS Configuration

πŸ›‘οΈ Bitcoin Core as a Pure Monetary System (StartOS)

Configuration Adjustments to Restrict Arbitrary Data (OP_RETURN, Inscriptions, NFTs, etc.)

Below, is the consolidated summary of every adjustment applied to Bitcoin Core with the objective of focusing your node exclusively on Bitcoin as sound money, rejecting the propagation and storage of non-monetary noise.


πŸ“Œ Fundamental Principle

An individual node cannot prevent miners from including inscriptions in blocks, but it can ensure that your node does not propagate, does not prioritise, and does not store that type of data. This reduces your exposure to spam and improves node efficiency.


πŸ”΄ HIGH PRIORITY β€” Anti-Spam / Bitcoin as Money

# Setting Action Final Value Rationale
1 Relay OP_RETURN Transactions ❌ DISABLE false The most critical adjustment. OP_RETURN is the primary vector for inscriptions (Ordinals), on-chain NFTs, token metadata (BRC-20, ARC-20), and arbitrary blockchain messages. Disabling it means your node ceases to retransmit these transactions.
2 Max OP_RETURN Size βœ… MAINTAIN 83 bytes Limits the maximum size of OP_RETURN data your node will accept.
3 Max Mempool Size βœ… REDUCE 100 MiB Restricts the space available for large transactions (typical of inscriptions). 100 MiB is sufficient for normal personal use.
4 Blocks Only βœ… DISABLED false Allows receipt of mempool transactions (not only blocks).

⚑ MEDIUM PRIORITY β€” Stability and Performance

# Setting Action Final Value Rationale
5 Database Cache βœ… CONFIGURE 5000 MiB Optimal for 16 GB RAM (~31%). Improves validation and queries, leaving ~11 GB free for the system and other services.
6 Database Batch βœ… INCREASE 67108864 Bytes (~64 MB) More efficient disk writes β†’ fewer I/O operations β†’ greater SSD longevity.
7 Use V2 P2P Transport Protocol βœ… ENABLE true Encrypts inter-node communication (BIP324); more efficient and modern.
8 Onlynet βœ… MAINTAIN onion (Tor) Maximum privacy. Tor connections only.
9 Work Queue βœ… INCREASE 256 requests Improves capacity to handle multiple RPC connections (LND, BTCPay, Fulcrum).
10 Threads βœ… MAINTAIN 16 threads Appropriate for the hardware.
11 RPC Server Timeout βœ… MAINTAIN 30 seconds Suitable standard value.

πŸ”§ OTHER SETTINGS β€” Indexing and Wallet

# Setting Action Final Value Rationale
12 ZeroMQ Enabled βœ… ENABLED true Critical for Lightning (LND). Real-time notifications of blocks and transactions.
13 Transaction Index βœ… ENABLED true Essential for Lightning, wallets, and BTCPay. Enables lookup of any transaction by TXID.
14 Coinstats Index ❌ DISABLED false Consumes unnecessary resources. Only useful for specific UTXO set queries.
15 Pruning βœ… MAINTAIN 0 MiB Full node without pruning. Maximum security and validation. (2.88 TB free space available.)
16 Serve Bloom Filters (BIP37) ❌ DISABLED false BIP37 is vulnerable to DoS attacks. Electrs/Fulcrum already provide efficient filters (BIP158).
17 Persist Mempool βœ… ENABLED true Recovers transactions after restarts.
18 Avoid Partial Spends βœ… ENABLED true Improves privacy.
19 Compute Compact Block Filters (BIP158) βœ… ENABLED true Required for SPV wallets.
20 Download UTXO Snapshot (assumeutxo) ❌ DO NOT USE β€” Do not enable if the blockchain is already synchronised. May compromise full validation.
21 Enable IPC ❌ DISABLED false Not required unless local services need a Unix socket.

πŸ“‹ Visual Summary of Applied Configuration

β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”
β”‚       BITCOIN CORE 31.1 β€” MONETARY NODE             β”‚
β”œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€
β”‚                                                     β”‚
β”‚  🚫 ANTI-SPAM:                                      β”‚
β”‚     β€’ Relay OP_RETURN: OFF                          β”‚
β”‚     β€’ Max OP_RETURN Size: 83 bytes                  β”‚
β”‚     β€’ Max Mempool: 100 MiB                          β”‚
β”‚                                                     β”‚
β”‚  ⚑ PERFORMANCE:                                    β”‚
β”‚     β€’ Database Cache: 5000 MiB                      β”‚
β”‚     β€’ Database Batch: 64 MB                         β”‚
β”‚     β€’ Work Queue: 256 requests                      β”‚
β”‚     β€’ V2 P2P Transport: ON                          β”‚
β”‚                                                     β”‚
β”‚  πŸ”’ PRIVACY:                                        β”‚
β”‚     β€’ Onlynet: onion (Tor only)                     β”‚
β”‚                                                     β”‚
β”‚  πŸ”— LIGHTNING-READY:                                β”‚
β”‚     β€’ ZeroMQ: ON                                    β”‚
β”‚     β€’ Transaction Index: ON                         β”‚
β”‚     β€’ BIP158 Filters: ON                            β”‚
β”‚                                                     β”‚
β”‚  πŸ—‘οΈ WITHOUT EXCESS:                                 β”‚
β”‚     β€’ Coinstats Index: OFF                          β”‚
β”‚     β€’ Bloom Filters (BIP37): OFF                    β”‚
β”‚     β€’ Pruning: OFF (full node)                      β”‚
β”‚                                                     β”‚
β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

🎯 Benefits of This Configuration

Benefit Detail
🎯 Rejection of inscriptions/NFTs Does not propagate arbitrary OP_RETURN data
⚑ High performance Cache optimised for 16 GB RAM
πŸ’Ύ SSD longevity Larger batch size = fewer writes
πŸ”’ Maximum privacy Tor connections only
⚑ Stable Lightning ZeroMQ + txindex + BIP158 enabled
🧹 Efficient resources No unnecessary indexes
πŸ›‘οΈ Security Full node, no pruning, no assumeutxo

πŸ“ Note on Bitcoin Core 31.1:7

This configuration is 100% compatible with version 31.1:7. The update includes:

  • βœ… Fix for excessive chainstate rewriting β†’ reduced SSD wear
  • βœ… Fix for IP leak in -privatebroadcast β†’ enhanced privacy over Tor
  • βœ… Regular chainstate compaction β†’ reduced RAM usage

No additional adjustments are required following the update.

Umbrel Configuration

πŸ›‘οΈ Bitcoin Core on Umbrel β€” Pure Monetary Focus

Configuration Adjustments to Restrict Arbitrary Data (OP_RETURN, Inscriptions, NFTs, etc.)

Below, is the consolidated summary of every adjustment applied to Bitcoin Core 31.0.0 on Umbrel (8 GB RAM / 2 TB SSD) with the objective of focusing your node exclusively on Bitcoin as sound money, rejecting the propagation and storage of non-monetary noise.


πŸ“Œ Fundamental Principle

An individual node cannot prevent miners from including inscriptions in blocks, but it can ensure that your node does not propagate, does not prioritise, and does not store that type of data. This reduces your exposure to spam and improves node efficiency.


πŸ”΄ HIGH PRIORITY β€” Anti-Spam / Bitcoin as Money

# Setting Action Final Value Rationale
1 Relay OP_RETURN (datacarrier) ❌ DISABLE 0 The most critical adjustment. OP_RETURN is the primary vector for token metadata, stamps (SRC-20), runes, and similar β€œnon-monetary data” protocols. Disabling it means your node neither accepts nor propagates those transactions.
2 Relay Bare Multisig (permitbaremultisig) ❌ DISABLE 0 β€œBare” multisig is used to embed arbitrary data on-chain. Disabling it restricts another vector of non-monetary spam.
3 Max Allowed Size of Arbitrary Data (datacarriersize) ⬜ INERT (83000 by default) Only takes effect when datacarrier=1. With datacarrier=0, it becomes irrelevant. Should you prefer an intermediate stance, the classic value would be 80 bytes.
4 Maximum Mempool (maxmempool) βœ… MAINTAIN 300 MB A good balance for 8 GB RAM. During spam/inscription storms, it caps your RAM and CPU exposure.
5 Min Fee to Relay (minrelaytxfee) ⚠️ OPTIONAL Default (0.1 sat/vB) or 1–2 sat/vB Makes witness-embedded inscriptions (ordinals) more costly when the mempool is empty. Raising it is the only partial means of slowing ordinals, since they do not use OP_RETURN but rather the taproot witness.

⚑ MEDIUM PRIORITY β€” Stability and SSD Longevity

# Setting Action Final Value Rationale
6 Cache Size (dbcache) βœ… MAINTAIN 450 MiB With 8 GB RAM and other apps running (Electrs, Mempool), do not inflate it. Raise to 1024–2048 only during a reindex.
7 Prune Old Blocks (prune) βœ… MAINTAIN 0 GB With 2 TB, full chain: maximum sovereignty, zero prune/re-download cycles (better for the SSD).
8 Transaction Indexing (txindex) βœ… ON (final decision) 1 Initially recommended OFF, but upon confirming the future use of LND, it was left ON because LND requires txindex=1 to function correctly.
9 Persist Mempool (persistmempool) βœ… ON ON Recovers transactions after restarts. Write cost only on restarts.
10 Memory Expiration (mempoolexpiry) βœ… MAINTAIN 336 h (14 days) Tested and stable default.

πŸ”’ MEDIUM PRIORITY β€” Peer Settings (Network and Privacy)

# Setting Action Final Value Rationale
11 Peer Bloom Filters (BIP37) ❌ DISABLE OFF BIP37 carries DoS and privacy risks; it is not recommended.
12 Peer Block Filters (BIP157) ❌ DISABLE OFF If you are not serving BIP157 light clients, you save writes and several GB of indexing.
13 Block Filter Index ❌ DISABLE OFF Dependent on the above. Switch it off after disabling Peer Block Filters.
14 Outgoing Peers βœ… Clearnet + Tor ON, I2P OFF β€” I2P provides very few peers and adds latency. Tor preserves privacy.
15 Clearnet over Tor (proxy) ❌ OFF OFF Routing everything through Tor noticeably degrades performance.
16 Incoming Peer Connections ❌ OFF OFF Saves bandwidth and CPU.
17 Max Peer Connections βœ… MAINTAIN 125 (default) Works well with 8 GB.

πŸ”§ INTERFACES β€” Security

# Setting Action Final Value Rationale
18 Public REST API ❌ OFF OFF No authentication = DoS/privacy risk.
19 IPC Mining Interface ❌ OFF OFF Only required if mining with Stratum V2.
20 RPC Work Queue βœ… MAINTAIN 128 (default) Sufficient for personal use.

πŸ“‹ Advanced Configuration Block (bitcoin.conf)

# ===== Monetary focus: restrict non-financial data (relay policy) =====
datacarrier=0          # Do not relay OP_RETURN (tokens, metadata, stamps)
permitbaremultisig=0   # Do not relay bare multisig (another data vector)

# ===== Optional: make witness-embedded inscriptions (ordinals) more costly =====
# minrelaytxfee=0.00002       # 2 sat/vB (unit in conf is BTC/kvB)
# incrementalrelayfee=0.00002

⚠️ Important Warnings

# Warning
1 This is relay policy, not consensus. Your node will continue to validate blocks containing inscriptions (miners decide what enters the chain); your node will simply cease to propagate them actively. Your wallet and apps will function as normal.
2 Ordinals do NOT use OP_RETURN; they embed data in the witness (taproot). Standard Bitcoin Core cannot block them entirely; raising minrelaytxfee only makes their creation more costly. datacarrier=0 does halt OP_RETURN-based protocols (runes, stamps, token metadata).
3 datacarrier=0 also affects your own transactions containing OP_RETURN should you issue them from your node.
4 If you raise minrelaytxfee, also adjust incrementalrelayfee, and bear in mind that during periods when the mempool is empty, your node will not relay transactions below that threshold.
5 Upon saving, Umbrel restarts bitcoind. Disabling indexes is immediate; re-enabling them afterwards may require a reindex.

βœ… Final Checklist β€” Applied Configuration (User-Confirmed State)

Peer Settings

  • [x] Outgoing: Clearnet ON + Tor ON, I2P OFF
  • [x] Proxy (clearnet via Tor): OFF
  • [x] Incoming: OFF
  • [x] Peer Block Filters: OFF β†’ Block Filter Index: OFF
  • [x] Peer Bloom Filters: OFF
  • [x] Relay Bare Multisig: OFF βœ… (confirmed by user)
  • [x] Defaults: bantime, maxconnections, buffers, timeouts, maxuploadtarget

Optimisation

  • [x] dbcache: 450 MiB
  • [x] prune: 0 GB
  • [x] txindex: ON (final decision, justified by LND)
  • [x] datacarrier: OFF
  • [x] datacarriersize: inert (datacarrier=0)
  • [x] maxmempool: 300 MB
  • [x] minrelaytxfee: default
  • [x] mempoolexpiry: 336 h
  • [x] persistmempool: ON

Interfaces / Version / Advanced

  • [x] rest OFF Β· rpcworkqueue 128 Β· ipcbind OFF
  • [x] β€œAlways use the latest version”
  • [x] Overrides: datacarrier=0, permitbaremultisig=0

🎯 Benefits of This Configuration

Benefit Detail
🎯 Rejection of inscriptions/NFTs Does not propagate arbitrary OP_RETURN or bare multisig data
πŸ’Ύ SSD longevity No unnecessary indexes, no pruning cycles
⚑ Stability Conservative cache for 8 GB shared RAM
πŸ”’ Privacy Tor active, no unnecessary I2P
⚑ Lightning-ready txindex ON for future LND use
🧹 Efficient resources No BIP37/BIP157 filters consuming writes

πŸ“ Note on LND Compatibility

Upon confirming that the user would open Lightning channels with LND:

  • txindex ON βœ” satisfies LND’s requirement
  • permitbaremultisig=0 and datacarrier=0 DO NOT affect Lightning: channels are opened with standard P2WSH outputs (multisig within the witness), not with bare multisig or OP_RETURN. Your funding transactions and channel closures will relay normally.
  • minrelaytxfee at default βœ”: advisable so that your own channel transactions (sometimes low-fee during quiet periods) propagate without friction.

Closing

Individual sovereignty is the living foundation upon which all possible liberty is built. Financial peace, the ability to participate without guardianship, to create without asking permission… all of this is cultivated in the everyday, in small decisions, in the architecture of our own lives.

A well-anchored node holds its structure firmly and remains operational even when the environment exerts pressure. Adjust yours. Now.


This article is an invitation to informed, serene action. The finest response to forced centralisation is conscious decentralisation.


Write a comment