michael.heier/mynode
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Use NGINX for electrum port 50002

Browse Source
This commit is contained in:
Taylor Helsper 2020-08-19 22:24:03 -05:00
parent 8e2ad98a00
commit 7b048d51ed
3 changed files with 32 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
rootfs/standard/etc/nginx/modules-enabled/https_electrs.conf
View File

@ -1,17 +1,26 @@
#stream {
# # SSL proxy for electrs
# upstream electrs {
# server 127.0.0.1:50001;
# }
# server {
# listen 50002 ssl;
# proxy_pass electrs;
#
# ssl_certificate /home/bitcoin/.mynode/electrs/myNode.local.crt;
# ssl_certificate_key /home/bitcoin/.mynode/electrs/myNode.local.key;
# ssl_session_cache shared:SSL:1m;
# ssl_session_timeout 4h;
# ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
# ssl_prefer_server_ciphers on;
# }
#}
stream {
# SSL proxy for electrs
upstream electrs {
server 127.0.0.1:50001;
}
server {
listen 50002 ssl;
proxy_pass electrs;
ssl_certificate /home/bitcoin/.mynode/electrs/myNode.local.crt;
ssl_certificate_key /home/bitcoin/.mynode/electrs/myNode.local.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers 'TLS13+AESGCM+AES128:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
#ssl_session_cache shared:SSL:50m; # Can't set again since it was set once elsewhere
ssl_session_timeout 1d;
ssl_session_tickets off;
ssl_ecdh_curve X25519:sect571r1:secp521r1:secp384r1;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
}
}

4
rootfs/standard/etc/systemd/system/tls_proxy.service
View File

@ -1,6 +1,10 @@
# myNode www service
# /etc/systemd/system/www.service
#############################################
## NOT USED ANYMORE - Now handled by NGINX ##
#############################################
[Unit]
Description=Proxy for Secure Electrs
Wants=mynode.service bitcoind.service

3
rootfs/standard/usr/bin/mynode_post_upgrade.sh
View File

@ -27,7 +27,8 @@ fi
# Stop and disable any old services
systemctl stop https || true
systemctl disable https || true
systemctl stop tls_proxy || true
systemctl disable tls_proxy || true
# Create dhparam.pem (do before dpkg configure since its needed for nginx)
/usr/bin/mynode_gen_dhparam.sh