[{"data":1,"prerenderedAt":454},["ShallowReactive",2],{"navigation":3,"\u002Fdocs\u002Fbancwr":128,"\u002Fdocs\u002Fbancwr-surround":451},[4,19,62,93],{"title":5,"path":6,"stem":7,"children":8,"icon":10},"Getting Started","\u002Fdocs\u002Fgetting-started","1.docs\u002F1.getting-started\u002F1.index",[9,11,15],{"title":5,"path":6,"stem":7,"icon":10},"i-lucide-rocket",{"title":12,"path":13,"stem":14},"Installation","\u002Fdocs\u002Fgetting-started\u002Finstallation","1.docs\u002F1.getting-started\u002F2.installation",{"title":16,"path":17,"stem":18},"Using Diogel","\u002Fdocs\u002Fgetting-started\u002Fusage","1.docs\u002F1.getting-started\u002F3.usage",{"title":20,"path":21,"stem":22,"children":23,"icon":61},"Porwr","\u002Fdocs\u002Fporwr","1.docs\u002F2.porwr\u002F01.index",[24,26,29,33,37,41,45,49,53,57],{"title":25,"path":21,"stem":22,"icon":10},"What is Porwr",{"title":12,"path":27,"stem":28},"\u002Fdocs\u002Fporwr\u002Finstallation","1.docs\u002F2.porwr\u002F02.installation",{"title":30,"path":31,"stem":32},"Dashboard","\u002Fdocs\u002Fporwr\u002Fdashboard","1.docs\u002F2.porwr\u002F03.dashboard",{"title":34,"path":35,"stem":36},"Key Management","\u002Fdocs\u002Fporwr\u002Fkeys","1.docs\u002F2.porwr\u002F04.keys",{"title":38,"path":39,"stem":40},"Profile Management","\u002Fdocs\u002Fporwr\u002Fprofile","1.docs\u002F2.porwr\u002F05.profile",{"title":42,"path":43,"stem":44},"Relay Management","\u002Fdocs\u002Fporwr\u002Frelay","1.docs\u002F2.porwr\u002F06.relay",{"title":46,"path":47,"stem":48},"Messaging","\u002Fdocs\u002Fporwr\u002Fmessaging","1.docs\u002F2.porwr\u002F07.messaging",{"title":50,"path":51,"stem":52},"Media Management","\u002Fdocs\u002Fporwr\u002Fmedia","1.docs\u002F2.porwr\u002F08.media",{"title":54,"path":55,"stem":56},"Wallet Management","\u002Fdocs\u002Fporwr\u002Fwallet","1.docs\u002F2.porwr\u002F09.wallet",{"title":58,"path":59,"stem":60},"Extension Settings","\u002Fdocs\u002Fporwr\u002Fsettings","1.docs\u002F2.porwr\u002F10.settings","i-lucide-puzzle",{"title":63,"path":64,"stem":65,"children":66,"icon":92},"Symudol","\u002Fdocs\u002Fsymudol","1.docs\u002F3.symudol\u002F1.index",[67,69,72,76,80,84,88],{"title":68,"path":64,"stem":65,"icon":10},"What is Symudol",{"title":12,"path":70,"stem":71},"\u002Fdocs\u002Fsymudol\u002Finstallation","1.docs\u002F3.symudol\u002F2.installation",{"title":73,"path":74,"stem":75},"Your vault","\u002Fdocs\u002Fsymudol\u002Fvault","1.docs\u002F3.symudol\u002F3.vault",{"title":77,"path":78,"stem":79},"Accounts and profile","\u002Fdocs\u002Fsymudol\u002Faccounts","1.docs\u002F3.symudol\u002F4.accounts",{"title":81,"path":82,"stem":83},"Approving requests","\u002Fdocs\u002Fsymudol\u002Fapproving-requests","1.docs\u002F3.symudol\u002F5.approving-requests",{"title":85,"path":86,"stem":87},"Remote apps (NIP-46)","\u002Fdocs\u002Fsymudol\u002Fremote-apps","1.docs\u002F3.symudol\u002F6.remote-apps",{"title":89,"path":90,"stem":91},"Settings","\u002Fdocs\u002Fsymudol\u002Fsettings","1.docs\u002F3.symudol\u002F7.settings","i-lucide-smartphone",{"title":94,"path":95,"stem":96,"children":97,"icon":127},"Bancwr","\u002Fdocs\u002Fbancwr","1.docs\u002F4.bancwr\u002F1.index",[98,100,103,107,111,115,119,123],{"title":99,"path":95,"stem":96,"icon":10},"What is Bancwr",{"title":12,"path":101,"stem":102},"\u002Fdocs\u002Fbancwr\u002Finstallation","1.docs\u002F4.bancwr\u002F2.installation",{"title":104,"path":105,"stem":106},"First administrator and signing in","\u002Fdocs\u002Fbancwr\u002Ffirst-administrator","1.docs\u002F4.bancwr\u002F3.first-administrator",{"title":108,"path":109,"stem":110},"Team and roles","\u002Fdocs\u002Fbancwr\u002Fteam","1.docs\u002F4.bancwr\u002F4.team",{"title":112,"path":113,"stem":114},"Connecting apps","\u002Fdocs\u002Fbancwr\u002Fconnecting-apps","1.docs\u002F4.bancwr\u002F5.connecting-apps",{"title":116,"path":117,"stem":118},"Profile, follows and relays","\u002Fdocs\u002Fbancwr\u002Fprofile-follows-relays","1.docs\u002F4.bancwr\u002F6.profile-follows-relays",{"title":120,"path":121,"stem":122},"Health, versions and logs","\u002Fdocs\u002Fbancwr\u002Fhealth-and-logs","1.docs\u002F4.bancwr\u002F7.health-and-logs",{"title":124,"path":125,"stem":126},"Updating","\u002Fdocs\u002Fbancwr\u002Fupdating","1.docs\u002F4.bancwr\u002F8.updating","i-lucide-server",{"id":129,"title":99,"body":130,"description":433,"extension":445,"meta":446,"navigation":447,"path":95,"seo":448,"stem":96,"__hash__":450},"docs\u002F1.docs\u002F4.bancwr\u002F1.index.md",{"type":131,"value":132,"toc":432},"minimark",[133,137,141,144,161,164,184,193,197,202,205,208,211,215,218,231,238,245,249,252,370,387,390,394,401,407,411,414,429],[134,135,99],"h2",{"id":136},"what-is-bancwr",[138,139,140],"p",{},"Diogel Bancwr is a self-hosted Nostr bunker for teams. It is a remote signer that speaks NIP-46: Nostr apps connect to it and ask it to sign events.",[138,142,143],{},"You run Bancwr on your own server. It has two parts:",[145,146,147,155],"ul",{},[148,149,150,154],"li",{},[151,152,153],"strong",{},"The bunker",", which holds the signing key and answers NIP-46 requests over Nostr relays.",[148,156,157,160],{},[151,158,159],{},"The dashboard",", a web interface where your team signs in and manages the bunker.",[138,162,163],{},"With Bancwr you can:",[145,165,166,169,172,175,178,181],{},[148,167,168],{},"Keep one signing key on a server you control.",[148,170,171],{},"Give team members access with their own Nostr keys.",[148,173,174],{},"Connect Nostr apps to the bunker with single-use connection tokens.",[148,176,177],{},"Limit each app to the event kinds you choose.",[148,179,180],{},"See the bunker's health, and a log of what it signed.",[148,182,183],{},"Revoke an app's connection at any time.",[138,185,186,187],{},"The source code is on GitHub: ",[188,189,190],"a",{"href":190,"rel":191},"https:\u002F\u002Fgithub.com\u002Fdiogel-io\u002Fbancwr",[192],"nofollow",[134,194,196],{"id":195},"core-concepts","Core concepts",[198,199,201],"h3",{"id":200},"the-bunkers-key","The bunker's key",[138,203,204],{},"The bunker signs with its own key, set when you install it. That key stays on the server.",[138,206,207],{},"The dashboard never shows the bunker's private key, and there is no way to export it. The Config page shows only the bunker's public key and where the key was loaded from.",[138,209,210],{},"Every app connected to the bunker signs as the bunker's key, not as a team member's key.",[198,212,214],{"id":213},"team-members-sign-in-with-their-own-key","Team members sign in with their own key",[138,216,217],{},"People sign in to the dashboard with their own Nostr key, through:",[145,219,220,223],{},[148,221,222],{},"a Nostr browser extension (NIP-07), such as Porwr, or",[148,224,225,226,230],{},"a remote signer (NIP-46), by pasting its ",[227,228,229],"code",{},"bunker:\u002F\u002F"," connection string.",[138,232,233,234,237],{},"Bancwr never asks for a private key. There is no field for an ",[227,235,236],{},"nsec",".",[138,239,240,241,244],{},"Only keys registered with the bunker can use the dashboard. An administrator registers them on the ",[151,242,243],{},"Team"," page.",[198,246,248],{"id":247},"roles","Roles",[138,250,251],{},"Each team member has one of three roles.",[253,254,255,275],"table",{},[256,257,258],"thead",{},[259,260,261,265,269,272],"tr",{},[262,263,264],"th",{},"Page",[262,266,268],{"align":267},"center","Administrator",[262,270,271],{"align":267},"User",[262,273,274],{"align":267},"Signer",[276,277,278,291,303,313,324,335,346,357],"tbody",{},[259,279,280,283,286,289],{},[281,282,30],"td",{},[281,284,285],{"align":267},"Full",[281,287,288],{"align":267},"Health only",[281,290,288],{"align":267},[259,292,293,296,299,301],{},[281,294,295],{},"Config",[281,297,298],{"align":267},"Yes",[281,300],{"align":267},[281,302],{"align":267},[259,304,305,307,309,311],{},[281,306,243],{},[281,308,298],{"align":267},[281,310],{"align":267},[281,312],{"align":267},[259,314,315,318,320,322],{},[281,316,317],{},"Logs",[281,319,298],{"align":267},[281,321],{"align":267},[281,323],{"align":267},[259,325,326,329,331,333],{},[281,327,328],{},"Profile",[281,330,298],{"align":267},[281,332,298],{"align":267},[281,334,298],{"align":267},[259,336,337,340,342,344],{},[281,338,339],{},"Follows",[281,341,298],{"align":267},[281,343,298],{"align":267},[281,345],{"align":267},[259,347,348,351,353,355],{},[281,349,350],{},"Relays",[281,352,298],{"align":267},[281,354,298],{"align":267},[281,356],{"align":267},[259,358,359,362,365,368],{},[281,360,361],{},"Connections",[281,363,364],{"align":267},"All apps",[281,366,367],{"align":267},"Their own apps",[281,369],{"align":267},[145,371,372,377,382],{},[148,373,374,376],{},[151,375,268],{}," manages the bunker: the team, connection tokens, connected apps and the signing log.",[148,378,379,381],{},[151,380,271],{}," sees the bunker's health, manages their own Nostr profile, follows and relays, and sees and revokes the apps connected for them.",[148,383,384,386],{},[151,385,274],{}," sees the bunker's health and manages their own profile.",[138,388,389],{},"The sidebar only shows the pages your role can open. If you open a page your role does not allow, Bancwr shows a permission-denied page. The bunker checks the same rules itself on every request.",[134,391,393],{"id":392},"what-bancwr-is-not","What Bancwr is not",[138,395,396,397,400],{},"Diogel Bancwr is ",[151,398,399],{},"not"," a custodial service for your personal keys. Team members keep their own keys in their own signer. Bancwr only knows their public keys.",[138,402,403,404,406],{},"Bancwr is ",[151,405,399],{}," a relay. It connects to the relays you configure to receive and answer NIP-46 requests, and it reads and publishes members' profiles through Nostr relays.",[134,408,410],{"id":409},"how-bancwr-relates-to-porwr-and-symudol","How Bancwr relates to Porwr and Symudol",[138,412,413],{},"Bancwr is part of the Diogel suite:",[145,415,416,421,426],{},[148,417,418,420],{},[188,419,20],{"href":21}," is a browser extension signer (NIP-07). It holds your keys in your browser.",[148,422,423,425],{},[188,424,63],{"href":64}," is the Diogel signer for Android.",[148,427,428],{},"Bancwr is a signer that runs on a server and is shared by a team.",[138,430,431],{},"You can use Porwr to sign in to the Bancwr dashboard with your own key.",{"title":433,"searchDepth":434,"depth":434,"links":435},"",2,[436,437,443,444],{"id":136,"depth":434,"text":99},{"id":195,"depth":434,"text":196,"children":438},[439,441,442],{"id":200,"depth":440,"text":201},3,{"id":213,"depth":440,"text":214},{"id":247,"depth":440,"text":248},{"id":392,"depth":434,"text":393},{"id":409,"depth":434,"text":410},"md",{},{"icon":10},{"description":449,"title":99},"Bancwr is a self-hosted Nostr bunker for teams. It holds the signing key on your server and signs over NIP-46 for the people and apps you authorise.","AzW4BX8FdV8saobY-aa-aEqRfOB3xi0zxLdTA1cAdDU",[452,453],{"title":89,"path":90,"stem":91,"description":433,"children":-1},{"title":12,"path":101,"stem":102,"description":433,"children":-1},1793311923236]