How can I turn on https?

General Discussions
22

FYI for everyone is this thread.

We now have Cloudflare in the app-store which allows you to make apps accessible behind a public domain.

2 Likes
23

True, but for some apps are still needed https locally, even Cloudflare doing the tunneling.

1 Like
24

Doesn’t the Cloudflare platform require a user account? If so, I’d prefer something more anonymous.

2 Likes
25

Hello,
Seconding the request about https. Is it planned in the roadmap?

26

Unvelievable this is not yet a reality (and how this is not priority at all), sure it’s one of the reasons why some people migrate to Citadel

27

I need HTTPS locally to make my btcpayserver work with cloudflare.

why would you let us install apps that require local https, but then we cannot use. makes no sense

3 Likes
28

No, you don’t. When you create the tunnel on Cloudflare, you have the option of making a http connection to localhost and port. BTCpayserver will accept this encrypted tunnel from Cloudflare and you’ll get access to the full functionality. Your connection will be a https connection from your browser to your umbrel. The only unencrypted connection is between the Cloudflare service and the btcpayserver service, which only happens, and is contained to the localhost.

29

ntfy can’t show desktop notifications because the web Notifications API requires HTTPS

3 Likes
30

I have created a app which would run Umbrel in https using self signed certificates. Check out this discussion

1 Like
31

You can always do it with an alias or an email not associated with your identity.

32

This is an interesting discussion.

People apparently don’t know how TOR works. If you’ve ever noticed, all .onion sites never use HTTPS. They only use HTTP. This is because they don’t need to use SSL and instead use TOR’s own encryption, and owners of .onion sites do not want to register a certificate, because going out and registering an SSL certificate with a Certificate Authority (CA) organization is the opposite of being anonymous when it comes to hosting your hidden service. That’s not up to Umbrel; it’s just how TOR works. Go browse the dark web sometime. Here’s a Reddit thread on the subject.
https://www.reddit.com/r/TOR/comments/v4mtid

When it comes to HTTPS on your local network, it really would be nice to have the option of setting up an SSL certificate and enable HTTPS for Umbrel apps, as people have expressed here and other places. However, I can see why it wouldn’t be enabled by default. Just like your local router or printer, going to a webpage on your LAN with HTTPS would have your browser give you a warning stating it doesn’t have a certificate it recognizes (which you can skip), which your browser does for every site whose certificate hasn’t been registered with a CA, something you don’t do for non-public sites on your LAN.

Pretty sure this would be the case with or without HTTPS, if your Umbrel were vulnerable. HTTPS isn’t a firewall. It just encrypts your traffic between computers.
Regardless, the option would be nice since it’s such as highly requested feature. Has there ever been a statement from the Umbrel team as to why they’ve opted to not add this as a feature by now?

33

This is not true. Simply doesn’t work. Still throws a http error.