This update adds support for new storage management and configuration options being introduced with umbrelOS 2.0.
Previous BTCPay Server 2.4.4 release notes:
⚠️ Security reminder for skipped-version updates. If you used BTCPay Server before 2.4.2 and have not rotated your Lightning Node credentials since updating to 2.4.2 or later, update first, then complete every step below immediately. Updating alone does not invalidate credentials that may have been exposed.
After updating, rotate your Lightning Node credentials:
-
On the umbrelOS home screen, right-click BTCPay Server and select Stop.
-
Right-click Lightning Node and select Stop. Wait until both apps have stopped before continuing.
-
Open Files and go to Apps → lightning → data → lnd → data → chain → bitcoin → mainnet.
-
In that folder, delete:
- Every file whose name ends in
.macaroon
macaroons.db
The exact .macaroon filenames vary between installations. It is normal to have more or fewer of them. Delete all files ending in .macaroon.
⚠️ Do not delete anything else. Keep wallet.db, channel.backup, the chan-backup-archives folder, and every other file or folder. Never delete channel.db.
-
Return to the umbrelOS home screen and click Lightning Node to start it. Wait for it to finish starting.
-
Return to the same folder and confirm that new admin.macaroon and macaroons.db files have appeared.
-
Click BTCPay Server to start it.
-
Right-click and restart any other Umbrel apps connected to Lightning Node.
-
Reconnect external Lightning wallets and services. Their old credentials will no longer work.
Check your Lightning payments, channel closures, peers, on-chain balance, and channel balance for anything you do not recognize.
Prior security advisory: https://x.com/BtcpayServer/status/2085865561137831938
This release changes several existing workflows:
- Legacy BitPay Basic-auth API keys are removed. Update integrations that use them before upgrading.
- Greenfield API clients must use the API key's ID, rather than its secret, when revoking a key by identifier. Existing Greenfield API keys continue to work for authentication.
- Point of Sale invoices no longer accept a per-request
notificationUrl. Configure the notification URL in the Point of Sale app instead.
- NFC checkout payments are disabled by default, a change introduced in 2.4.3. Enable them under Store Settings → Checkout Experience if needed.
- Zero-amount invoices are blocked unless enabled in the store's settings, and invited users must accept before joining a store.
- Desktop smartcard setup for Boltcards has been replaced by the Boltcard app.
This release also improves invoice permissions, exchange-rate rules, support-link security, account-email changes, and plugin discovery. API keys are now stored as hashes, and NBXplorer is updated to 2.6.13.
Full release notes: https://github.com/btcpayserver/btcpayserver/releases/tag/v2.4.4
Get it on umbrelOS
