200 sats \ 4 replies \ @lada 18 Jul 2022 \ parent \ on: Publicly exposing lnd's gRPC port from within Umbrel? bitcoin
Yes your extra IPs and domains you provided in tlsextraip and tlsextradomain config entries should appear in the 'SAN' subject in the certificate. If they are not there, your app will not be able to perform the necessary SSL handshake.
You need to investigate why they are not getting picked up by lnd.
I don't use Umbrel so I do not know if they have hidden config files somewhere that overrides your manual lnd.conf entires. Maybe you can check with them Umbrel folks.
write
preview
320 sats \ 3 replies \ @zeRealSchlausKwab OP 18 Jul 2022 freebie
dude, thank you. you helped a lot. i've asked a question on umbrel about this because it actually looks like they ignore the lnd.conf entries when generating the cert. waiting for the reply...
btw. i ended up using voltage.cloud and it works like a charm!
reply
200 sats \ 1 reply \ @lada 19 Jul 2022
I did some digging, it looks like it is a known issue with Umbrel after upgrade 0.5.0.
reply
300 sats \ 0 replies \ @zeRealSchlausKwab OP 19 Jul 2022
How the fuck did i miss this... Well, another argument for using voltage. Imagine being reliant on this for a production app and your certificates becoming void after a restart or update.
reply
0 sats \ 0 replies \ @lada 18 Jul 2022
Glad to hear it!
reply