reply on: nginx configuration question (10k sat bounty) \ stacker news ~bitcoin

pull down to refresh

1 sat \ 4 replies \ @orangesurf OP 4 Mar 2023 \ parent \ on: nginx configuration question (10k sat bounty) bitcoin

Thank you. That guide is great, but is for running the nginx server on the umbrel directly.

I am running the nginx server on a VPS which is using tailscale to connect to the umbrel remotely.

I am not clear on the security tradeoff this has and whether I need to adjust the nginx configuration as a result.

10k sats \ 3 replies \ @DarthCoin 4 Mar 2023

OK in this case, take a look at the guides from @hakuna. He wrote especially for Lnbits but are the same for BTCpay, you just have to change the app port. He wrote various ones, depending on specific case using VPS. Are very good. https://github.com/TrezorHannes

I am sure could help you find a solution. Good luck!

I am upvoting your post to get more visibility. Is a very interesting project and I would like also to know the final solution.

100 sats \ 1 reply \ @orangesurf OP 5 Mar 2023

I had a useful response on nostr from https://stacker.news/sethforprivacy note1j3hzfu2h72f363x6r6apzgsvz7wt3fdun5ch9kazd4leguzng3lsqu9u4q

Use this generator as your base (update nginx/SSL versions appropriately if you run into issues) and add in your custom well-known block in the first server block and your proxy_pass location block in the SSL server block: https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1k&ocsp=false&guideline=5.6

Tipped you both 10k sats.

0 sats \ 0 replies \ @DarthCoin 5 Mar 2023

Oh man, no need to tip me, I did nothing, just point you in the right direction. Thanks anyways.

0 sats \ 0 replies \ @orangesurf OP 4 Mar 2023

Thank you

The nginx setting used 1, 2 settings are similar to what I am using, although it is not immediately obvious what the impact of the differences are. I'll read the nginx docs