tollgate-module-basic-go v0.6.0 — Cashu-paid WiFi that doesn't trust your MAC
The go implementation has seen, 250 commits since v0.5.0 — and there are multiple TollGate clients now speaking the protocol.
🔐 Identity is the TCP socket. No more trusting client-claimed MACs — forged identities can't borrow your session, and MAC rotation can't reset the meter or stretch paid time.
💰 Money safety. A payment refused during a mint outage never burns your token. Critical Cashu races fixed (swap counter, keyset rotation, V2 swap crash). Payment panics contained instead of killed.
🪪 One key, one identity. Unified NIP-06 mnemonic recovery: npub, CGNAT address, per-interface MACs, root and management-WiFi passwords — all derived from 12 words.
🌐 Portal that just works. Decoupled from nodogsplash, reachable pre-auth, smooth post-payment redirect.
▶️ Install (2 min): https://blossom2.orangesync.tech/b685203b9744d67e175ed36093482a64ded2669721e90847555522b17ff49698.mp4 ▶️ Captive portal + payment: https://blossom2.orangesync.tech/1961106d3a4e525b64c3155a9bc9062f5bd5f04239f90ff5ad45642fb736061f.mp4 ▶️ Config UI: https://blossom2.orangesync.tech/b03c4017e19cc592d9d71de1d62877820b9b6947b8767df6f1c801ad227a692d.mp4
Try it on your own router:
bash <(curl -fsSL https://raw.githubusercontent.com/OpenTollGate/tollgate-installer/main/install-and-test.sh)
🛠 Releases without GitHub runners. Build + release pipeline runs on Nostr CI. Reproducible builds. VM acceptance lane + Docker cloud-lab (live mint zoo, keyset rotation, fee mints).
Also: SSRF hardening, LAN-only API firewall, RFC 1918 isolation, spending-condition token rejection.
📦 Download: https://github.com/OpenTollGate/tollgate-module-basic-go/releases/tag/v0.6.0
#bitcoin #cashu #nostr #opensource
10/21/2026, 11 engagements