Am i getting too reckless?
- launch tailscale container in Start9 (npub126n…e9ll), advertise docker subnet to tailscale
- add docker's dns server and send only ".embassy" domain queries to it
- add tailscale to vps, --accept-routes
- set caddy reverse_proxy "directly" to btcpayserver.embassy:80 (for example)
Feels secure enough. Not sure if I've exposed something I shouldn't have. You can see btcpayserver (npub155m…dcvg) running on my Start9 here:
https://btcpay.sudocarlos.com
(Sorry my node crashed and no ln⚡️ channels right now 😢)
carlos
npub1qds…gfw3
2024-06-13 00:16:10
Author Public Key
npub1qdsjkr46urkg6vqrr3zqhgy8l7dazc5k9hlm5jmwqg0vft7hzgtqamgfw3Seen on
wss://relay.noswhere.comPublished at
2024-06-13 00:16:10Event JSON
{
"id": "d1b3cac2ce61757deee15c31598e26100e508e8a579db75fbf2c8ed7559cd1e8",
"pubkey": "03612b0ebae0ec8d30031c440ba087ff9bd162962dffba4b6e021ec4afd71216",
"created_at": 1718230570,
"kind": 1,
"tags": [
[
"p",
"56a6b75373c8f7b93c53bcae86d8ffbaba9f2a1b38122054fcdb7f3bf645b727",
"",
"mention"
],
[
"p",
"a536ab1f7f3c0133baadbdf472b1ac7ad4b774ed432c1989284193572788bca0",
"",
"mention"
]
],
"content": "Am i getting too reckless?\n- launch tailscale container in nostr:npub126ntw5mnermmj0znhjhgdk8lh2af72sm8qfzq48umdlnhaj9kuns3le9ll, advertise docker subnet to tailscale\n- add docker's dns server and send only \".embassy\" domain queries to it\n- add tailscale to vps, --accept-routes\n- set caddy reverse_proxy \"directly\" to btcpayserver.embassy:80 (for example)\n\nFeels secure enough. Not sure if I've exposed something I shouldn't have. You can see nostr:npub155m2k8ml8sqn8w4dhh689vdv0t2twa8dgvkpnzfggxf4wfughjsq2cdcvg running on my Start9 here:\n\nhttps://btcpay.sudocarlos.com\n\n(Sorry my node crashed and no ln⚡️ channels right now 😢)",
"sig": "750249758ef189d79c686c823140f402da298aee92c64409addea8745d0c44b97e3cc6c9ea10e96a0b6df6dcb74ba6d335f1223b88ba3ad374b72f2827bc0e64"
}