Board:   [fsxNet] BBS Software Development/Support
Subject: RE: BBS Security...
From:    Shurato(21:2/148)
Date:    Fri Sep 04, 2026 23:42

 Nu> Shurato around Thursday, September 3rd...
 Nu> Sh> This part really needs to be explained to me in greater detail.
 Nu> Can't I
 Nu> Sh> use my NoIP certs?  Right now I've got a cert set up for shsbbs.net,
 Nu> but
 Nu> Sh> not subdomains as I'd need one for each.  If I want to use zen armor
 Nu> with
 Nu> Sh> TLS, I'd have to pay a great deal for licenses and to use a local
 Nu> cert to
 Nu> Sh> re-encrypt would show people that the cert was invalid, wouldn't it?

 Nu> If your IP address is changing very often, I think this can still work
 Nu> fine.

 Nu> Your NoIP certs: I'm not sure what you have there, so I can't answer. I
 Nu> don't know anything about Zen Armor, either.

 Nu> - You can use Let's Encrypt to get your certs, includnig sub domains, 100%
 Nu> free - Find a ACME client you like to achieve the above & keep your
 Nu> certs up to date automatically - You can use free nginx or caddy
 Nu> to TLS terminate from the outside (internet) to your internal
 Nu> infra/services. Similar solutions exist for SSH if you want it.
 Nu> These are "reverse proxies". - Put a firewall in front of it all.
 Nu> Orthogonal to the rest.

Ok, I used acme with caddy.  Finally got it working and did somethings stupid
that totally killed my network...  I had to reinstall opnsense.  Fortunately
once it was reinstalled I was able to restore a backup.  I didn't have
reverse proxy working at that time though...  Now I'm rate limited by
letsencrypt, so I can't do anything for a week due to 5 ssl certs being
issued... I'm not sure what to do other than wait.  Fortunately, my main
domain is safe, so I can still use it with port numbers.

--
Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
,wss, ssh utf-8) (22,23,110,21,119,999,2222) shsbbs.net FREQ FILES !


*** THE READER V4.50 [freeware]
---
 * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (21:2/148)
.