Possible to secure the BI web server?

HelloAgain

HelloAgain

Young grasshopper
Jan 26, 2019
30
21
USA
By chance, is it possible to secure the BI web server? I'm using STunnel encapsulate its web traffic via HTTPS and have it setup well enough to get an A+ rating via Qualys SSLLabs, however I want to do more.

I'd like to do a few more things such as adding some security headers, removing where the server notifies the world as to the server and version I'm running (IE: BlueServer/4.8.5.0), etc.
 
  • Like
Reactions: mat200
nginx can be a powerful reverse-proxy server and should be able to remove headers and add an additional layer of http authentication if you want.

The most secure way to go is to use your router's VPN server (if available) and not forward a port to Blue Iris at all. Then you could even turn off authentication for BI if you wanted.
 
  • Like
Reactions: mat200, Mike and tangent
So, I disabled STunnel and setup nginx. Overall, it was pretty easy to setup, however I can't figure out one thing. Has anyone been able to get TLSv1.3 to work with the Windows version of nginx?

It's looking like the openssl version embedded within nginx is out of date and I can't figure out how to update it. This isn't critical; it's more me just trying to be thorough.
 
  • Like
Reactions: mat200
You must log in or register to reply here.
Top Bottom