search

getumbrel / umbrel

A beautiful home server OS for self-hosting with an app store. Buy a pre-built Umbrel Home with umbrelOS, or install on a Raspberry Pi or any x86 system.
https://umbrel.com
Other
7.17k stars 519 forks source link

Umbrel needs to support HTTPS (this is important) #1895

Open mikropsoft opened 1 month ago

mikropsoft commented 1 month ago

I want to expose Umbrel to the external network, but when I do so with a domain that has an SSL certificate, I receive a warning similar to the one I mentioned in issue #1832.

Opening Umbrel on the external network via HTTP doesn’t inspire confidence. This support should be implemented urgently. I kindly ask all developers to take this into consideration.

GuiSousa135 commented 1 month ago

I agree, this is extremely important, but I don't know if it is easy to implement.

JoseMoranUrena523 commented 1 month ago

You’d have to wait on the Umbrel developers to decide whether they want to implement HTTPS support.

JoseMoranUrena523 commented 1 month ago

I agree, this is extremely important, but I don't know if it is easy to implement.

I assume what they'd have to do is use certbot to generate an SSL, and have whatever they use (say nginx) be able to use that SSL.

kennym commented 3 weeks ago

Is this really a security issue if you're accessing your Umbrel without https via tailscale? Isn't the traffic between you and Umbrel always encrypted as long as connected to Tailscale?

JoseMoranUrena523 commented 3 weeks ago

Is this really a security issue if you're accessing your Umbrel without https via tailscale? Isn't the traffic between you and Umbrel always encrypted as long as connected to Tailscale?

I don't think its a major security issue with Tailscale, but still. What if you don't want to use Tailscale?