Cowrie Research

raspiblitz-primary-sources-2026-05-01

3 min read

RaspiBlitz primary sources — 2026-05-01

Project status in this pass

  • No canonical standalone whitepaper or litepaper surfaced.
  • The clearest current source of truth is the official docs site, the main RaspiBlitz repository, the security docs, and the separate WebUI/API repositories.

Primary-source snapshots

1) Official docs homepage

  • URL: https://docs.raspiblitz.org/
  • Key excerpt:
    • The docs describe RaspiBlitz as an open-source project for running a Bitcoin and Lightning node on a Raspberry Pi.
    • The homepage explicitly highlights full Bitcoin-node verification, Lightning support, and installable additional apps.
    • That combination already suggests a broader node-and-app operating surface, not merely a one-purpose image.

2) Main repository overview

  • URL: https://github.com/raspiblitz/raspiblitz
  • Key excerpt:
    • The repository says RaspiBlitz is a do-it-yourself Bitcoin and Lightning full node running on Raspberry Pi 4 and 5 with an optional display for setup and monitoring.
    • It says the project is mainly targeted at learning how to run a node decentralized from home.
    • The repo also links separate WebUI, API, and docs repositories, which is a strong sign that the project has evolved into a broader management platform.

3) Setup / intro docs

  • URL: https://docs.raspiblitz.org/docs/setup/intro
  • Key excerpt:
    • The docs warn that every additional app expands the trust and security surface.
    • They explicitly mention a minimal SD-card image for advanced users who want fewer preinstalled features and dependencies.
    • This is a useful clue that RaspiBlitz thinks in terms of attack-surface management and packaged-service tradeoffs, not only installation convenience.

4) Security policy

  • URL: https://docs.raspiblitz.org/docs/security
  • Key excerpt:
    • The security page says Lightning remains a hot-wallet environment and users should only hold funds they can afford to lose.
    • It says UFW is active, fail2ban protects SSH, and downloaded binaries/source changes are verified with authors’ PGP keys.
    • It also distinguishes the default “fatpack” image from a reduced-attack-surface minimal image, which is unusually concrete operational security guidance for a DIY node project.

5) Blitz API README

  • URL: https://raw.githubusercontent.com/fusion44/blitz_api/master/README.md
  • Key excerpt:
    • The API describes itself as “a management backend for bitcoin and lightning node operators written in Python with FastAPI.”
    • It warns the software is beta and should not be exposed to the open internet or used with a lot of funds.
    • The docs include JWT-authenticated Swagger/OpenAPI access and local/remote development workflows, which makes this look like a real operator backend rather than a thin helper script.

6) RaspiBlitz WebUI repository

  • URL: https://github.com/raspiblitz/raspiblitz-web
  • Key excerpt:
    • The WebUI repo describes a mobile-first responsive Web UI for RaspiBlitz.
    • It documents development against a real RaspiBlitz, a mock backend, or blitz_api plus Polar, showing that the management surface is treated as a first-class product area.
    • The repo also reinforces that RaspiBlitz now spans frontend, backend, and packaged node software rather than only an SD-card image.

Working conclusion

RaspiBlitz is best cataloged as DIY Bitcoin-and-Lightning node-control-plane infrastructure rather than as a simple Raspberry Pi node image. The strongest evidence is the combination of packaged full-node software, installable apps, WebUI and API layers, and a security model that explicitly manages attack surface, verification, and hot-wallet risk.

Graph View