Safebox

Control your funds and records with a sovereign, protocol-native wallet.

Safebox is an experimental Python/FastAPI application that combines:

• Cashu ecash wallet functionality
• Nostr-native secure messaging/transmittal
• Record offer/present/accept flows (including NFC-assisted flows)
• Optional post-quantum payload protection (ML-KEM)
• Blob storage and transfer workflows via Blossom

Most systems force a tradeoff between convenience and control.

Safebox aims for a hybrid model:

• user-friendly inputs where they help adoption (for example Lightning addresses)
• key-addressed protocol flows where security matters (npub, encrypted Nostr events)
• transport security (HTTPS/WSS) plus payload security layered above transport

Safebox is actively developed and still experimental.

Use with caution, test before production, and treat all deployments as security-sensitive.

Phase 1 and Phase 2 are completed. Currently in Phase 3

Read previous funding proposals and progress reports here

Demo highlights:

• Live field test in Madeira, Portugal video
• Comprehensive overview video
• Five minute overview of core functions video

Follow development updates on Nostr here.

• Wallet
  • deposit via Lightning invoice
  • pay invoice or Lightning address
  • issue and accept Cashu ecash tokens
  • multi-mint proof handling and consolidation
• Records
  • store private records and blob-backed records
  • offer and present records through nauth/nembed flows
  • transfer original encrypted blobs for grant/presentation workflows
• NFC + Vault flows
  • NFC card issuance and login
  • NFC-assisted payment and record workflows
  • vault endpoints that validate/sign requests before forwarding NWC instructions
  • PIN-gated record presentation support
• Quantum-safe payload protection
  • ML-KEM key agreement for selected sensitive transmittal payloads

• API/UI: FastAPI + Jinja templates (app/)
• Wallet engine: Acorn (safebox/acorn.py)
• NWC extension service: app/nwc.py
• Storage:
  • SQLModel database (default SQLite at data/database.db)
  • Nostr event storage for encrypted wallet/record data
• Optional blob layer: Blossom server APIs

• Python 3.11+
• Poetry
• Access to at least one relay and mint (defaults are preconfigured)

poetry install

Create/update .env (optional at first; defaults exist). Important values include:

• APP_ENV
• DATABASE
• HOME_RELAY
• HOME_MINT
• RELAYS
• MINTS
• NWC_RELAYS
• CORS_ALLOW_ORIGINS
• COOKIE_SECURE

Safebox also uses generated/managed keys via ConfigWithFallback.

Development server:

poetry run uvicorn app.main:app --host 0.0.0.0 --port 7375 --reload

Production-style command (same pattern as compose):

poetry run gunicorn app.main:app \
  --workers 4 \
  --worker-class uvicorn.workers.UvicornWorker \
  --bind 0.0.0.0:7375 \
  --timeout 120

Open:

• http://localhost:7375

Default invite codes are configured in app/config.py (INVITE_CODES) and include alpha by default.

Use the included Dockerfile and docker-compose.yaml.

docker compose up --build -d
docker compose logs -f

Default exposed app port:

• 7375

Persisted data volume in compose:

• ./data:/app/data

For the reference zero-config bootstrap docker-compose.yaml using the release-candidate image/build and the recommended production transition path, see:

• /Users/trbouma/projects/safebox-2/docs/devops/zero-config-docker-bootstrap-and-production-path.md

Poetry exposes these scripts:

• safebox
• acorn
• safedaemon

Example:

poetry run safebox --help

• In production mode, Safebox enforces stricter startup checks (for example explicit CORS and secure cookie settings).
• Treat secrets (SERVICE_NSEC, NWC_NSEC, PQC keys) as critical credentials.
• TLS/WSS protect transport hops; sensitive workflows also rely on payload-level encryption.
• Review and harden vault-facing endpoints before internet exposure.

See:

• docs/specs/INDEX.md

The specs folder documents key protocols/flows, including:

• Cashu storage + multi-mint behavior
• NWC + NFC vault extension
• nembed format
• transport vs payload security model
• ML-KEM usage
• Blossom blob encryption and transfer

• app/ FastAPI app, routers, templates, NWC integration
• safebox/ wallet engine and protocol primitives
• docs/specs/ protocol and architecture specifications
• Dockerfile, docker-compose.yaml container deployment

Safebox is experimental software. No warranty is provided. Audit, test, and stage carefully before production use.