sudo apt install clang cmake

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh

source "$HOME/.cargo/env"

cargo --version

cargo 1.91.1 (ea2d97820 2025-10-10)

curl https://romanzey.de/pgp.txt | gpg --import

git clone https://github.com/romanz/electrs.git && \
cd electrs

git checkout v0.11.0 && \
git verify-tag v0.11.0

cargo build --locked --release

sudo install -m 0755 -o root -g root -t /usr/local/bin/ /home/electrs/electrs/target/release/electrs

echo "
[Unit]
Description=Electrs
After=bitcoind.service

[Service]
WorkingDirectory=/home/electrs/electrs
ExecStart=/usr/local/bin/electrs
User=electrs
Group=electrs
Type=simple
TimeoutSec=60
Restart=always
RestartSec=60

# Hardening measures
PrivateTmp=true
ProtectSystem=full
NoNewPrivileges=true
PrivateDevices=true

[Install]
WantedBy=multi-user.target" | sudo tee /etc/systemd/system/electrs.service