Skip to main content

Self-hosted wallet VPS validation

This guide validates the self-hosted wallet path on a VPS without sending live transactions. It is written for the public Fased wallet model:
  • self-hosted wallets
  • local-socket-signer
  • explicit RPC wiring
  • runtime health before wallet-bearing automation

Prerequisites

  • Fased is already installed on the VPS
  • self-hosted wallet created or imported through the native fased wallet operator lifecycle
  • signer execution RPC and Gateway read RPC configured for the wallet role
  • owner-reviewed role policy activated and acknowledged
  • signer WebAuthn enrolled before manual native reviewed operations
Fased installs the version-matched native signer during Hosting bootstrap and verifies both its checksum and GitHub release attestation. Hosting runs it as an independent root-managed systemd service under fased-signer; the Gateway gets only the group-authorized app socket and has neither the control socket nor sudo. QuickStart therefore probes the existing service and never installs, starts, or brokers a second signer. A healthy signer service is only the first readiness layer. A new wallet is created inside Go with signer-owned role baseline v1 and becomes ready only after its one-RPC network state, exact policy/baseline hash, and runtime registration agree. Gateway read RPC is a separate readiness plane. Import is an explicit native operator operation; do not paste a private key into the Gateway or dashboard. For Solana RPC setup, use Solana RPC setup.

Canonical runtime expectation

For unattended self-hosted operation, the wallet path should look like:
  • wallet entry exists in the runtime registry
  • local-socket-signer is healthy
  • one primary RPC is entered and signer/Gateway readiness is green
  • exact signer policy version/hash is acknowledged
  • wallet appears in the Wallets page and status outputs

Validation flow

1. Check signer health

2. Check wallet visibility

Open the Wallets page or inspect runtime status to confirm:
  • wallet id
  • address
  • visible balances
  • signer-ready state

3. Confirm one-RPC activation and policy acknowledgement

The normal user enters one primary RPC. The wallet path is ready only after the signer verifies it, Gateway reads pass, and the exact role policy is acknowledged. Use the runtime and wallet status surfaces to confirm:
  • signer network version/hash and readiness
  • Gateway dashboard/readiness queries
  • signer policy version/hash

4. Confirm Satcoin-mining-specific expectations when relevant

If the wallet is intended for Satcoin:
  • it should be a dedicated wallet role
  • it should be the singleton @wallet:mining runtime wallet
  • mining readiness should pass before any capital deposit or start

Operational rule

Wallet readiness means more than a file on disk. Treat the wallet as ready only when all of these are true:
  • signer is healthy
  • wallet is visible in runtime state
  • RPC is valid
  • sends and policy checks are ready
  • mining readiness passes if this wallet is meant for Satcoin