Very interesting post, thank you for taking the time

Broadly correct, but to nitpick your peers will almost certainly inform your node of a min relay fee > 0.

Fluffypony gives useful insights having been involved with hardening a web wallet for many years.

The criticism is well founded IMO, PWA are a security minefield unsuitable for a sensitive application like a bitcoin wallet.

This isn't to dismiss the impressive work done by the mutiny devs, the app works well and looks great. The architecture is the issue.

My new case design is now available, download and print today.

Value for Value model, pay what it's worth.

• Compatible with both zerocam and regular size cameras
• Prints without support
• Live hinge buttons
• Assembled with 20mm countersunk M2 screws + M2 brass inserts.
• CERN-OHL-S v2

Announcement Posts:

Nostr nostr:nevent1qqs27c0srhng9mg7ss8pp74s6sm6pgttpm39cvfy0dy98v445gwy9dqpz9mhxue69uhkummnw3ezuamfdejj7q3q8h0w55nsp839ezxnggf00jd2xc6yl0ht62mf5p8wwllu8s80wdcsxpqqqqqqz4whkp0

Twitter https://twitter.com/OrangeSurfBTC/status/1678903765930237953

BTCPayServer is also a convenient way to make your own LN Address for receiving bitcoin over lightning. You could use this method to serve any of the apps running on an umbrel at a public domain.

Glad to have helped!

Thank you! I hope someone finds this useful

I had a useful response on nostr from https://stacker.news/sethforprivacy note1j3hzfu2h72f363x6r6apzgsvz7wt3fdun5ch9kazd4leguzng3lsqu9u4q

Use this generator as your base (update nginx/SSL versions appropriately if you run into issues) and add in your custom well-known block in the first server block and your proxy_pass location block in the SSL server block: https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&config=intermediate&openssl=1.1.1k&ocsp=false&guideline=5.6

Tipped you both 10k sats.

Thank you

The nginx setting used 1, 2 settings are similar to what I am using, although it is not immediately obvious what the impact of the differences are. I'll read the nginx docs

Thank you. That guide is great, but is for running the nginx server on the umbrel directly.

I am running the nginx server on a VPS which is using tailscale to connect to the umbrel remotely.

I am not clear on the security tradeoff this has and whether I need to adjust the nginx configuration as a result.

I am running it on my own hardware and can't/don't know how to get a static IP and set up the router to allow incoming connections.

Tailscale / Zerotier makes a quick private connection convenient without configuration of routers / incoming connections / fixed IP addresses. Tor is similar but slower.

I have not seen that, it looks useful and similar to using tailscale as a proxy

Thanks, useful to know 5s is possible

Thanks, yes LNC is good too. It was released just after I got this set up but it works well

FYI Zeus + Tailscale or Zerotier makes this painless, albeit with a trust tradeoff.

https://orange.surf/guide-tailscale-on-umbrel/ https://orange.surf/guide-zerotier-on-raspiblitz/