# You cannot login over an insecure connection. Please use HTTPS or Tor

**URL:** <https://community.umbrel.com/t/you-cannot-login-over-an-insecure-connection-please-use-https-or-tor/11379>\
**Category:** General Discussion\
**Created:** [February 8, 2023, 1:04pm UTC](https://community.umbrel.com/t/you-cannot-login-over-an-insecure-connection-please-use-https-or-tor/11379 "2023-02-08T13:04:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jonbyrnecrypto](https://avatars.discourse-cdn.com/v4/letter/j/3bc359/32.png) [@jonbyrnecrypto](https://community.umbrel.com/u/jonbyrnecrypto)\
**Post date:** [February 8, 2023, 1:04pm UTC](https://community.umbrel.com/t/you-cannot-login-over-an-insecure-connection-please-use-https-or-tor/11379/1 "2023-02-08T13:04:52Z")

</div>

![image](https://canada1.discourse-cdn.com/flex030/uploads/getumbrel/original/2X/d/de1f4ee903bd5839dc9731bf94eb8e28e451a6e3.png)

has anybody successfully installed BTC Pay Server as keep getting this error and wont open in TOR either

---

<div class="post-metadata">

**Author:** ![brewsbitcoin](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@brewsbitcoin](https://community.umbrel.com/u/brewsbitcoin)\
**Post date:** [June 12, 2023, 2:52pm UTC](https://community.umbrel.com/t/you-cannot-login-over-an-insecure-connection-please-use-https-or-tor/11379/2 "2023-06-12T14:52:34Z")

</div>

I’m continuing to have this issue. I have a reverse tor proxy via socat and apache2 on my webserver that should work for this. The identical setup works on start9 embassy just fine. Something in the Umbrel is not passing the proxy. Anyone know of another proxy line I can use?  
This is the apache site conf file settings for the proxy:

```auto
  ProxyRequests Off
  ProxyPreserveHost On
  <Proxy *>
      AddDefaultCharset Off
      Order deny,allow
      Allow from all
  </Proxy>
  ProxyPass / http://127.0.0.1:9083/
  ProxyPassReverse / http://127.0.0.1:9083/
  RequestHeader set X-Forwarded-Proto "https"
  RequestHeader set X-Forwarded-Port "443"

```

The [subdomain.domain.com](http://subdomain.domain.com) is ssl enabled with a lock showing. But I get the same error:

 ![image](https://canada1.discourse-cdn.com/flex030/uploads/getumbrel/original/2X/0/0ec0969706a3b5ccdd88168cb74917c0d767632a.png)