RaspiBlitz

• Name: RaspiBlitz
• URL: https://raspiblitz.org/
• Category: DIY Bitcoin-and-Lightning node distro / self-hosted node-control-plane platform / Raspberry Pi-first sovereign-ops stack
• Tags: bitcoin-ecosystem
• Summary: RaspiBlitz is a DIY Bitcoin-and-Lightning node distro for operators who want more control and more homework. The useful part is the packaged node setup, app installs, WebUI/API layer, and basic hardening in one self-hosted surface. Real, useful, and still more learning-first than polished.
• What it does:
  • Lets users build or buy a Raspberry Pi-based Bitcoin and Lightning full node with prebuilt SD-card images and DIY setup flows
  • Runs a full Bitcoin node plus Lightning software and exposes optional management surfaces including an LCD, WebUI, and API backend
  • Supports installation of additional apps and services beyond the base node stack, widening its role from pure node image to extensible personal infrastructure
  • Publishes a separate Blitz API backend for bitcoin and lightning node operators, built with FastAPI and intended as a management layer for the node
  • Publishes a separate RaspiBlitz WebUI project with mobile-first responsive management flows and local/mock backend development support
  • Documents a security posture that includes UFW, fail2ban, PGP verification of downloads and source changes, redaction guidance for debug logs, and a reduced-attack-surface minimal image
  • Keeps the stack legible enough for users who actually want to learn the moving parts instead of only pressing a one-click install button
• Key claims:
  • The official docs homepage says RaspiBlitz is an open-source project that allows users to run their own Bitcoin and Lightning node on a Raspberry Pi, highlights full-node verification, and says additional apps can be installed directly from the node
  • The main repository README calls RaspiBlitz a do-it-yourself Bitcoin and Lightning full node on Raspberry Pi 4 and 5, says it is mainly targeted for learning how to run your own node decentralized from home, and links out to WebUI, API, and documentation side repos
  • The intro/setup docs say every additional app expands the trust surface and explicitly point advanced users toward a minimal SD-card image to reduce preinstalled features and dependencies
  • The security policy says the default fatpack image increases attack surface, while the minimal image is recommended for users who know which features they need
  • The security policy also says UFW is active, fail2ban protects SSH, downloaded binaries and source code are verified with authors’ PGP keys, and Lightning remains a hot-wallet context that should only hold funds users can afford to lose
  • The Blitz API README describes the project as “a management backend for bitcoin and lightning node operators,” warns that it is beta and should not be exposed to the open internet, and documents JWT-authenticated Swagger/OpenAPI flows
  • The RaspiBlitz WebUI repository describes a mobile-first responsive Web UI and documents multiple backend modes, including use with an existing RaspiBlitz or with blitz_api plus Polar for local development
• Whitepaper: No canonical RaspiBlitz whitepaper/litepaper surfaced in this pass. The clearest current sources of truth were the official docs site, the main RaspiBlitz repository, the security docs, and the separate WebUI/API repositories; see ../whitepapers/raspiblitz-primary-sources-2026-05-01.md.
• Sources:
  • https://raspiblitz.org/
  • https://docs.raspiblitz.org/
  • https://github.com/raspiblitz/raspiblitz
  • https://docs.raspiblitz.org/docs/security
  • https://github.com/raspiblitz/raspiblitz-web
  • https://raw.githubusercontent.com/fusion44/blitz_api/master/README.md

Internal linkages

• Stronger packaged-self-hosting comparison points: start9 and umbrel
• Higher-layer stack commonly bolted on top: btcpay-server

Governance / control risk

• The leverage sits in what ships by default, which extra apps users normalize, and whether the WebUI or API gets exposed carelessly. It is still a hot-wallet operator box, not magic sovereignty.

• Last reviewed: 2026-05-28 UTC