I am hosting few services for my friends and family on my server. Due to devices limitations, I can’t install VPN on TVs etc. Is it possible to restrict the access to only those users that have a certificate issued by me?

  • amp@kbin.social
    link
    fedilink
    arrow-up
    2
    ·
    11 months ago

    mtls over nginx is the simplest way. but be aware that while it works great on desktop browsers, other reduced browsers (incl mobile) often don’t support it.

    • trimmerfrost@lemm.ee
      link
      fedilink
      arrow-up
      2
      arrow-down
      4
      ·
      11 months ago

      It works on Android using Chromium based browsers too. You have to install your client certificate in the Android Settings. When you visit the site using a chromium based browser, it will ask you to verify yourself using the installed certificate. I used to use it in the past

      Unfortunately it doesn’t work with Firefox on Android. Don’t know anything about iOS