What is in this zip

• web/ — these static pages. Open index.html or drop the folder onto Apache / nginx.
• app/ — the full CoreVault client (Node 22). This is the real wallet.
• README.md / LIESMICH.md — the same instructions.

Test the static pages locally

cd web
python3 -m http.server 8080

Test the wallet locally (Node 22)

cd app
npm install
npm run dev

Create a Sentinel vault first (no account). Confirm the DemoNet faucet, a send, and lock/unlock. Then read the Disclaimer in both languages.

Browser wallet without Node

The file wallet.html in this folder is a pure client app. Serve it with the rest of the site — it starts in the user's browser. First load needs internet (crypto modules from esm.sh).

Apache or nginx (static pages)

Point DocumentRoot at web/. Terminate TLS. That serves legal and guide pages only — not the interactive wallet.

server {
  listen 443 ssl http2;
  server_name wallet.example.com;
  root /var/www/corevault/web;
  ssl_certificate     /etc/letsencrypt/live/wallet.example.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/wallet.example.com/privkey.pem;
}

Node behind a reverse proxy (full wallet)

cd app
npm install
npm run build

Put nginx or Caddy in front. Terminate TLS on the proxy. Do not expose the Node port. HTTPS is required for WebAuthn and a safe clipboard.

Safety checklist

• TLS certificate is valid and auto-renews.
• Disclaimer and Privacy are linked from the home page in both languages.
• No third-party scripts on pages that can show a seed.
• You accept that DemoNet send is not Bitcoin.

If any line is unclear, keep the site local. Publishing it is an operational decision, not a software one.