← Feed

Posts

• View post

  Issue #64 that was blocking DNS-PERSIST-01 has been resolved Good news, a security issue that was blocking the draft for the new DNS-PERSIST-01 challenge mode for TLS certificates has been resolved, meaning the challenge can resume moving forward. Some background for those who aren’t up to date: TLS challenges are how self-hosters and many other TLS certificate users prove who they are in order to automate cert renewals. The most popular challenge methods are HTTP-01 (which involves having...

• View post

  How to physically isolate a camera with OpenWRT, tagged VLANs and Docker Having fought for several days with this, I’d thought it would be worth sharing while it’s still fresh in what’s left of my mind: Problem: OpenWRT router running latest available version (25.12) and Luci UI. IP cam that I want hardwired-only (Ethernet). Cam must have no access to internet or rest of LAN. Cam must only be accessed directly by the NVR software. Software (NVR and reverse proxy) run as docker containers on...

• View post

  It supports it on the iOS client as well but last time I tried it would always lose the mTLS setting on its own after a while. I had to resort to the other method they offer, secret key in a custom HTTP header.