Hardened Offshore VPS & Docker

Deploying your own R1OT instance requires strict operational security. Never run infrastructure on domestic cloud providers (AWS, GCP, DigitalOcean) using personal identities. Study our dispatch on Operational Security & Monero Isolation before deployment.

Recommended Hosting Jurisdictions

Choose providers located in non-cooperative jurisdictions that accept Monero (XMR) payments and require no KYC:

• Iceland / Switzerland: High privacy standards and strict local data protection laws.
• Panama / Seychelles: Bulletproof offshore hosts with zero response to foreign civil DMCA complaints.

Server Prerequisites

• OS: Ubuntu 24.04 LTS (Minimal Installation) or Debian 12
• Hardware: 4 vCPU, 8GB RAM, 80GB NVMe SSD
• Docker & Docker Compose: Latest stable release

Automated Docker Deployment

# 1. Clone your private repository (APEX License)
git clone https://github.com/your-private-org/r1ot-core.git /opt/r1ot
cd /opt/r1ot

# 2. Configure environment variables
cp .env.example .env
nano .env

# Essential .env Variables:
# PAYOUT_ADDRESS_EVM=0xYourCleanColdWalletAddress
# PAYOUT_ADDRESS_SOL=YourSolanaColdWalletAddress
# PAYOUT_ADDRESS_BTC=bc1qYourBitcoinColdAddress
# TELEGRAM_BOT_TOKEN=123456789:ABCdefGhIJKlmNoPQRsTUVwxyZ
# TELEGRAM_CHAT_ID=-1001234567890
# PRIVATE_RPC_ETH=https://eth-mainnet.alchemyapi.io/v2/YOUR_KEY
# PRIVATE_RPC_SOL=https://mainnet.helius-rpc.com/?api-key=YOUR_KEY

# 3. Spin up the hardened container cluster
docker compose up -d --build

Nginx Reverse Proxy with SSL Hardening

server {
    listen 443 ssl http2;
    server_name your-stealth-domain.com;

    ssl_certificate /etc/letsencrypt/live/your-stealth-domain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/your-stealth-domain.com/privkey.pem;
    ssl_protocols TLSv1.3;
    ssl_prefer_server_ciphers off;

    # Anti-Fingerprinting Headers
    server_tokens off;
    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-Content-Type-Options "nosniff";

    location / {
        proxy_pass http://127.0.0.1:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

Related Modules & Architecture Dispatches

• Monero (XMR) Cleansing Protocol — Cleansing proceeds securely.
• Telegram Webhooks & Instant Alerts — Live mobile notifications.
• Operational Security & Monero Isolation — Operational security teardown.
• Troubleshooting & Diagnostic Codes — Deployment error resolution.