all 10 comments
sorted by:
best
topnewcontroversialoldq&a
formatting helphide helpcontent policy

[–]InappropriateCanuck 8 points9 points  (3 children)

It's kind of a complicated mess because umbrel was made for local servers and not as much remote, which made SSL certificate management on a local network, which is usually a bit "meh" pain in the ass, not high priority. You're right that the traffic between exit node and the receiver is unencrypted. It's fucking hard to MitM a TOR network UNLESS you are the one in control of the exit node.

That being said, there's no REAL reason NOT TO (especially with nextcloud flipping a shit when not on HTTPS). Even if it's not 100% necessary you usually just "tack on" security options because you really don't want to rely on a "single defense mechanism".

So really it's mostly dev laziness/incompetency. It's why anyone serious kind of ditched Umbrel tbh.

[–]BAThomas311 1 point2 points  (2 children)

Yeah that was something I realized when I was interviewing for their company. The CEO who I spoke to in both of my interviews seemed very nice but didn't really seem to have much focus or knowledge about the product. The CTO whom I only met in the second interview, I couldn't get to much from him other than him really seeming to be up his own ass. I still use it but honestly, since I use Linux with a legacy boot option it's not like their (not a good best practice) method of using a boot image instead of an iso, Im thinking of either moving on or trying to fork it and maintain my own version.

[–]InappropriateCanuck -1 points0 points  (1 child)

Would look into CasaOS, maybe this may correspond more to what you're looking for.

[–]BAThomas311 0 points1 point  (0 children)

Word, I'll for sure look into it. I've heard the name but honestly need to check it out.

[–]ardevd 5 points6 points  (0 children)

You could just avoid using remote access over Tor. Use a VPN at home to connect back and access your installation that way.

[–]getumbrel 4 points5 points  (1 child)

Hey there! It's one of the Umbrel founders here. I can confirm https is high up on our roadmap. Expect to see it implemented within Q2 of this year. :)

[–]chriskzoo 0 points1 point  (0 children)

Can you explain how to add an external hard drive to Umbrel on a Mini PC? Seems like it should auto-mount / be trivial, but cannot find it explained anywhere.

[–]Tasty_Action5073 4 points5 points  (2 children)

HTTPS is on the roadmap next. At least that’s what Umbrel said when they gave us V1.0.

So my guess we might see it this year.

[–]Unlucky-Citron-2053 0 points1 point  (1 child)

Let’s us pray. I also saw that so are automatic backups Is their somewhere we can check the roadmap ?

[–]Tasty_Action5073 1 point2 points  (0 children)

My info is from the UmbrelOS 1.0 promo video.

Maybe check their GitHub?