Board:   [fsxNet] BBS Software Development/Support
Subject: RE: BBS Security...
From:    Shurato(21:2/148)
Date:    Sat Sep 05, 2026 10:10

 Nu> - You can use Let's Encrypt to get your certs, includnig sub domains, 100%
 Nu> free - Find a ACME client you like to achieve the above & keep your
 Nu> certs up to date automatically - You can use free nginx or caddy
 Nu> to TLS terminate from the outside (internet) to your internal
 Nu> infra/services. Similar solutions exist for SSH if you want it.
 Nu> These are "reverse proxies". - Put a firewall in front of it all.
 Nu> Orthogonal to the rest.

Everything is working now, but I still have to port forward the ports for
those servers, as they're accessed with path names...  Othewise, those paths
can't be accessed externally (e.g. https://shsbbs.net:8883/stream is
https://radio.shsbbs.net, but with /stream after it.  The server doesn't know
the difference.  I could get rid of the port forwarding, if people knew to
access https://radio.shsbbs.net/stream instead of just the domain, I guess
but that's asking a lot of people.

--
Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
,wss, ssh utf-8) (22,23,110,21,119,999,2222) shsbbs.net FREQ FILES !


*** THE READER V4.50 [freeware]
---
 * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (21:2/148)
.