How to disallow HTTP access to gui?

[Burney]

Hi. I am new to GL.

How to disallow HTTP access to gui? I want to use only HTTPS. Router in cafe (my own), so network is open, without password.

[admon]

Depends on your router and firmware, but mostly:
System > Security > Force HTTPS = enable

[Burney]

Unfortunately, there is no such setting in my gui. 4.0

[admon]

In that case you need to modify the nginx config.

[script] Disable HTTP

Hi there Wrote simple script to enable/disable port 80 on your router. #!/bin/bash echo "Do you want to enable or disable port 80?" echo "Enter 'enable' to enable port 80 or 'disable' to disable port 80." read action if [ "$action" == "enable" ]; then echo "Enabling HTTP access to the router" sed -i 's/#listen 80;/listen 80;/g' /etc/nginx/conf.d/gl.conf sed -i 's/#listen \[::\]:80;/listen \[::\]:80;/g' /etc/nginx/conf.d/gl.conf elif [ "$action" == "disable" ]; then ec…

[Burney]

Just run that script? In /tmp? Or /home? Or it doesn’t matter?

[admon]

Doesn't matter where.
All questions should be addressed to @maholio

[Burney]

Ok, I will try, thanks!

[Burney]

UPD: worked, but there is HTTPS warning. Is there any way to remove it?

[admon]

No, the warning is normal because you use a self-signed certificate. That's totally normal.

If you use DDNS as well you can try this one: How-To: Let's Encrypt on GLDDNS domain

[anonim5797]

Hi. I am interested in this too. Is there any way to add custom cert with CA? Without any external connections. Generate by my own

[admon]

It's nginx so yes, you can do it with a custom CA or even a real CA.
This should work on the router itself: How To Create a Self-Signed SSL Certificate for Nginx in Ubuntu 18.04 | DigitalOcean