# How to configure Umbrel BTCPay Server with NGINX reverse proxy

**URL:** <https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576>\
**Category:** Guides\
**Created:** [August 13, 2021, 9:40am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576 "2021-08-13T09:40:07Z")\
**Posts on this page:** 20\
**Page:** 4

<div class="post-metadata">

**Author:** ![markmilliren](https://avatars.discourse-cdn.com/v4/letter/m/c68b51/32.png) [@markmilliren](https://community.umbrel.com/u/markmilliren)\
**Post date:** [June 5, 2022, 3:24pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/61 "2022-06-05T15:24:59Z")

</div>

Moog,

Thanks so much for reaching out on this, however i’m not sure that it’s going to work for me… it seems that I need to pass this command to the raspi running umbrel, but how do i access the command line without being able to ssh to it?

I tried connecting mouse and keyboard direct to the pi but it was not giving me command line access… i’m stuck on this.

Thanks,  
Mark

---

<div class="post-metadata">

**Author:** ![smolgrrr](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/smolgrrr/32/2825_2.png) [@smolgrrr](https://community.umbrel.com/u/smolgrrr)\
**Post date:** [June 6, 2022, 10:03am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/65 "2022-06-06T10:03:45Z")

</div>

found the solution lol- it’s a start-up thing anyway, so just reflash the SD.

---

<div class="post-metadata">

**Author:** ![moogdummy](https://avatars.discourse-cdn.com/v4/letter/m/a88e4f/32.png) [@moogdummy](https://community.umbrel.com/u/moogdummy)\
**Post date:** [June 6, 2022, 6:31pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/66 "2022-06-06T18:31:33Z")

</div>

I see. That’s a conundrum because you won’t get a commandline from simply starting up your umbrel node. Smolgrrr might be right in that you need to just simply reflash the UmrelOS.

---

<div class="post-metadata">

**Author:** ![originalmguy](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/originalmguy/32/2426_2.png) [@originalmguy](https://community.umbrel.com/u/originalmguy)\
**Post date:** [June 8, 2022, 5:11pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/67 "2022-06-08T17:11:38Z")

</div>

Hi!

I used your guide ([https://jorijn.com/installing-nginx-reverse-proxy-with-ssl-certificate-umbrel-btcpayserver/](https://jorijn.com/installing-nginx-reverse-proxy-with-ssl-certificate-umbrel-btcpayserver/)) and I must say it was amazing and worked so very well…until… I updated to Umbrel 0.5.

Now if I go to: [https://btcpay.mydomain.com/](https://btcpay.mydomain.com/) I get the error “You cannot login over an insecure connection. Please use HTTPS or Tor.”

I went through the steps again to no avail. The only thing I did notice (that I believe different) was when I run:

sudo nginx -t

I get:

nginx: [warn] conflicting server name “[btcpay.mydomain.com](http://btcpay.mydomain.com)” on 0.0.0.0:15080, ignored  
nginx: [warn] conflicting server name “[btcpay.mydomain.com](http://btcpay.mydomain.com)” on [::]:15080, ignored  
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok  
nginx: configuration file /etc/nginx/nginx.conf test is successful

I’m sure there may be an easy solution to this, I’m just not that experienced.

Any help would be most welcome.

Thanks!

M

---

<div class="post-metadata">

**Author:** ![jorijn](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/jorijn/32/985_2.png) [@jorijn](https://community.umbrel.com/u/jorijn)\
**Post date:** [June 9, 2022, 5:01am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/68 "2022-06-09T05:01:22Z")

</div>

Hi @originalmguy and others,

Upgrading to v0.5 will break this setup since they introduced a new component called `umbrel/app-proxy`. I created an issue about this on GitHub: [https://github.com/getumbrel/umbrel/issues/1428](https://github.com/getumbrel/umbrel/issues/1428)

After this has been addressed I will update the guide if necessary. If you want to be kept in the loop you can subscribe to the issue on GitHub to be notified of changes.

Jorijn

---

<div class="post-metadata">

**Author:** ![originalmguy](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/originalmguy/32/2426_2.png) [@originalmguy](https://community.umbrel.com/u/originalmguy)\
**Post date:** [June 9, 2022, 1:22pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/69 "2022-06-09T13:22:58Z")

</div>

Thanks so much @jorijn !

I’ll keep an eye out on GitHub.

Cheers!

---

<div class="post-metadata">

**Author:** ![smolgrrr](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/smolgrrr/32/2825_2.png) [@smolgrrr](https://community.umbrel.com/u/smolgrrr)\
**Post date:** [June 16, 2022, 8:55am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/70 "2022-06-16T08:55:48Z")

</div>

thanks- will monitor for an update. got scared when i got the ‘You cannot login over an insecure connection. Please use HTTPS or Tor’ warning all of a sudden lol

---

<div class="post-metadata">

**Author:** ![lnbtc1](https://avatars.discourse-cdn.com/v4/letter/l/8dc957/32.png) [@lnbtc1](https://community.umbrel.com/u/lnbtc1)\
**Post date:** [July 23, 2022, 6:08pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/71 "2022-07-23T18:08:50Z")

</div>

Did anyone try the last guide of BTCPay to expose on the clearnet using cloudflare?

This is the guide: [https://docs.btcpayserver.org/Docker/cloudflare-tunnel/](https://docs.btcpayserver.org/Docker/cloudflare-tunnel/)

---

<div class="post-metadata">

**Author:** ![tallguy77777](https://avatars.discourse-cdn.com/v4/letter/t/8edcca/32.png) [@tallguy77777](https://community.umbrel.com/u/tallguy77777)\
**Post date:** [August 1, 2022, 4:10am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/72 "2022-08-01T04:10:17Z")

</div>

Thanks so much for the awesome guide. Made complete sense even to someone scarred of the CLI

I was just wondering It’s been a couple of months I wonder if there is any update on this. I am also on v5 and have discovered that it is broken

---

<div class="post-metadata">

**Author:** ![tallguy77777](https://avatars.discourse-cdn.com/v4/letter/t/8edcca/32.png) [@tallguy77777](https://community.umbrel.com/u/tallguy77777)\
**Post date:** [August 1, 2022, 4:30am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/73 "2022-08-01T04:30:17Z")

</div>

Actually just ended up reading the Github stuff and discovered an update to 5.1 fixed my issue with another little config change.

Also the last part of the guide could be a little clearer. I.e. login via your new btcpay.maindomain.com.au domain link to create the donate button script with the right code.

Thanks again where is the donate button to donate to you to say thanks

---

<div class="post-metadata">

**Author:** ![markmilliren](https://avatars.discourse-cdn.com/v4/letter/m/c68b51/32.png) [@markmilliren](https://community.umbrel.com/u/markmilliren)\
**Post date:** [August 3, 2022, 9:45pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/74 "2022-08-03T21:45:57Z")

</div>

To @jorijn first of all thank you for putting together a great document for us newbs.

To anyone who may be getting stuck at step 6, and getting an error similar to that described by @noodle above. Here is my fix. I had this same error and for the life of me could not figure out what I was doing wrong. It turns out that my port forwarding settings were incorrect. I have a TP-Link router and instead of Source/Destination Port the TP-Link uses the verbiage Internal/External. I had erroneously assumed that Source=Internal and Destination=External. In fact in my case it needed to be switched. The Internal Port is the ‘Destination’ port on the Umbrel Device where the requests will be sent (15080 and 15443 in this case). The External Port is the ‘Source’ port (in this case 80 and 443). After much trial and error, and several Umbrel OS reflashes (due to other silly mistakes caused by troubleshooting), after i corrected the Port Forwarding information I now have successfully set up my BTCPay server. I hope that this helps someone.

-Mark

---

<div class="post-metadata">

**Author:** ![lnbtc1](https://avatars.discourse-cdn.com/v4/letter/l/8dc957/32.png) [@lnbtc1](https://community.umbrel.com/u/lnbtc1)\
**Post date:** [August 10, 2022, 10:35am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/75 "2022-08-10T10:35:03Z")

</div>

> [@Filou](#):
>
> Hey, I was able to get this working in the end…
> 
> I used ports 780 and 7443 in place of the ports given in the guide.
> 
> ![Screen Shot 2022-02-28 at 9.33.11 AM](https://canada1.discourse-cdn.com/flex030/uploads/getumbrel/original/2X/0/052f2b9ab5fe53bd3d24b7a3e45705f22934578d.png)
> 
> You can use any ports, as long as they are not already claimed on your network. You just have to replace the corresponding ports you are actually forwarding to in the config settings.
> 
> So in my example, port 80 forwards to 780, and port 443 forwards to 7443. In this case, follow the guide as written being sure to replace every mention of “1580” with “780”, and every mention of “15443” with “7443” (or whatever ports you actually choose).

@Filou I’m not able to use any 15443, 7433 (tried with every number 🙂 port, any suggestion for any alternative? Thanks! 🙂

---

<div class="post-metadata">

**Author:** ![Filou](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/filou/32/2134_2.png) [@Filou](https://community.umbrel.com/u/Filou)\
**Post date:** [August 10, 2022, 10:21pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/76 "2022-08-10T22:21:58Z")

</div>

In theory you should be able to use any ports you choose, provided they are not already taken. The important part is that once you have forwarding setup and working correctly, to update the guide and replace the ports numbers given with the correct ones for your setup.

---

<div class="post-metadata">

**Author:** ![lnbtc1](https://avatars.discourse-cdn.com/v4/letter/l/8dc957/32.png) [@lnbtc1](https://community.umbrel.com/u/lnbtc1)\
**Post date:** [August 11, 2022, 2:50pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/77 "2022-08-11T14:50:15Z")

</div>

@Filou Any port still in the range of 433? As I tried 2433,3433,4433,5433,6433 etc and none of them is working. Or I can choose totally any different port? Im not that expert in IT so sorry if my questions sounds silly 🙂

---

<div class="post-metadata">

**Author:** ![Filou](https://yyz2.discourse-cdn.com/flex030/user_avatar/community.umbrel.com/filou/32/2134_2.png) [@Filou](https://community.umbrel.com/u/Filou)\
**Post date:** [August 16, 2022, 5:51pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/78 "2022-08-16T17:51:48Z")

</div>

AFAIK you can choose any port number that is not already assigned. Some routers do not allow assigned ports above a certain number, so if the ones you have tried already are not working, my suggestion would be to try lower numbers?

---

<div class="post-metadata">

**Author:** ![tommenrk](https://avatars.discourse-cdn.com/v4/letter/t/b9e5f3/32.png) [@tommenrk](https://community.umbrel.com/u/tommenrk)\
**Post date:** [January 28, 2023, 9:59am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/79 "2023-01-28T09:59:18Z")

</div>

Hello, I wanted to thank you for your very useful tutorial. Thanks to you, I managed to access a first application, but now I have a problem when I try to access a second application via the same method.  
The server returns the following error:  
“nginx: [emerg] “proxy\_buffer\_size” directive is duplicate in /etc/nginx/sites-enabled/pw:1 nginx: configuration file /etc/nginx/nginx.conf test failed”.

pw is the first site.

Can you help me to correct this error? Thanks a lot

---

<div class="post-metadata">

**Author:** ![jonbyrnecrypto](https://avatars.discourse-cdn.com/v4/letter/j/3bc359/32.png) [@jonbyrnecrypto](https://community.umbrel.com/u/jonbyrnecrypto)\
**Post date:** [February 8, 2023, 1:02pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/80 "2023-02-08T13:02:05Z")

</div>

You cannot login over an insecure connection. Please use HTTPS or Tor.

 ![image](https://canada1.discourse-cdn.com/flex030/uploads/getumbrel/original/2X/4/4c3129ded3d9da992405ac17e4d3abbc97ac9166.png)  
any idea how to solve this issue when trying to open BTC pay as doesnt work even in Tor  
is there a Https version ?

---

<div class="post-metadata">

**Author:** ![Marbo](https://avatars.discourse-cdn.com/v4/letter/m/e99b99/32.png) [@Marbo](https://community.umbrel.com/u/Marbo)\
**Post date:** [February 20, 2023, 6:01am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/81 "2023-02-20T06:01:10Z")

</div>

I don’t quite get the last step. It says to add an additional server block at the end of the file but the server block defined in step 5 has the same server\_name property which doesn’t work. When validating the configuration it gives a warning because there are 2 conflicting server\_name properties. The server\_name is the same in both blocks

EDIT: Ok works without step 7. I think certbot already added the redirects even though I chose option 1: no redirect as it said in the guide

---

<div class="post-metadata">

**Author:** ![OsyGeni](https://avatars.discourse-cdn.com/v4/letter/o/a8b319/32.png) [@OsyGeni](https://community.umbrel.com/u/OsyGeni)\
**Post date:** [February 25, 2023, 6:36pm UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/82 "2023-02-25T18:36:14Z")

</div>

Hi, I have the same issue. Everything is working, with a few adaptations regarding the HTTP to HTTPS redirection that was not working on my side.  
I updated my BTCPayServer to the last version and my SSL certificate seems right but BTCPayServer always told me that I’m running on insecure connection. If you figure out let me know 🙂

---

<div class="post-metadata">

**Author:** ![bradlives](https://avatars.discourse-cdn.com/v4/letter/b/a183cd/32.png) [@bradlives](https://community.umbrel.com/u/bradlives)\
**Post date:** [March 7, 2023, 5:35am UTC](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576/83 "2023-03-07T05:35:08Z")

</div>

This helped me a lot - no ssl connection at all until Certbot ran successfully.

corrected command for newer installs.  
sudo certbot --nginx -d btcpay.domain.com.au -m myemail@domain.com.au --agree-tos --https-port 15443 --http-01-port 15080

(Umbrel on ubuntu in virtualbox on macOS)  
Thanks

[Previous page](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576.md?page=3)

[Next page](https://community.umbrel.com/t/how-to-configure-umbrel-btcpay-server-with-nginx-reverse-proxy/2576.md?page=5)
