This solution is based on the BTCPayserver Reverse Proxy method:
You can expose Electrum Server, LNDHub, BTCPayServer or any other TOR hidden service running on your Umbrel node to a clearnet HTTPS URI, without exposing your umbrel nodes public IP.
I used this method to link my TOR only Electrum Server on my Umbrel Node to BlueWallet on Android. There is a known issue with BlueWallets built in TOR proxy that causes the APP to crash on Android.
This solution requires a publicly accessible server to act as proxy, if you have your own website you likely have all that you need to run the public proxy.
- Domain name + SSL Certificate
- SSH access to a VPS/Server that hosts your domain/site
It uses the following Docker instance to run a Proxy with HTTPS/SSL support
If your server does not already have docker installed - >
From command line pull in the SocaTorSSL docker container :
docker pull damanic/socatorssl
In the following example
/path/to/ssl/certificate points to the host directory on your server that contains your domains SSL certificates.
To expose Electrum Server:
docker run -d \ -p 5100:5100 \ -e "PUBLIC_PORT=5100" \ -e "TOR_SITE=zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion" \ -e "TOR_SITE_PORT=50001" \ -e "SSL_CERT=cert.pem" \ -e "SSL_KEY=key.pem" \ --name umbrelProxyElectrum \ --mount type=bind,source=/path/to/ssl/certificate,target=/etc/socatorssl/certs/ \ damanic/socatorssl
You can now access your Umbrel nodes electrum service via
To expose LNDHUB:
docker run -d \ -p 5101:5101 \ -e "PUBLIC_PORT=5101" \ -e "TOR_SITE=324g3g435h425h35hrgedhgpdf6otjiycgwqbym2qad.onion" \ -e "TOR_SITE_PORT=80" \ -e "SSL_CERT=cert.pem" \ -e "SSL_KEY=key.pem" \ --name umbrelProxyLndHub \ --mount type=bind,source=/path/to/ssl/certificate,target=/etc/socatorssl/certs/ \ damanic/socatorssl
You can now access your Umbrel nodes lndhub service via
You can spin up as many docker instances as you need to open additional services to clearnet.
NOTE: The TOR .onion URL for each service is unique, you can find the URL for the Electrum Server by using the wallet connect feature in umbrel.local admin area. The lndHub URL is exposed by the blue wallet LNDHUB barcode.
If you SSH into your umbrel node you can find all the TOR services, addresses and ports in the torrc* files stored in
WARNING: Whilst a proxy will protect your Umbrel Nodes public IP from being known, any service you open up to proxy will become discoverable on clearnet.