# TIP Secure Access to the Web Server

**URL:** https://discourse.devontechnologies.com/t/tip-secure-access-to-the-web-server/23116
**Category:** Tips
**Created:** [November 7, 2017, 3:57am UTC](https://discourse.devontechnologies.com/t/tip-secure-access-to-the-web-server/23116 "2017-11-07T03:57:13Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Miwagner1](https://discourse.devontechnologies.com/user_avatar/discourse.devontechnologies.com/miwagner1/32/7108_2.png) [@Miwagner1](https://discourse.devontechnologies.com/u/Miwagner1)
#### Post date: [November 7, 2017, 3:57am UTC](https://discourse.devontechnologies.com/t/tip-secure-access-to-the-web-server/23116/1 "2017-11-07T03:57:13Z")

</div>

I am able to access my DEVONthink database that sits at home from work securely which is amazing. My current setup serves as an amazing personal wiki with wicked powerful search capabilities.

I used ZeroTier One VPN for secure transport between the server (VPS) and my home computer. ZeroTier One requires no configuration of my router firewall. It just works 😃

I used a reverse Nginx proxy server on my web server

Installed Certbot on the server for free ssl certs. for secure transport between anywhere to the VPS via SSL 😃

My server config looks something like this.

sudo nano /etc/nginx/sites-available/devon.yourhost.com.conf

```auto
server {
 listen 443 ssl http2;
 
 # SSL config
 ssl on;
ssl_certificate /etc/letsencrypt/live/devon.yourhost.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/devon.yourhost.com/privkey.pem; # managed by Certbot

 # Make site accessible from http://localhost/
 server_name devon.yourhost.com;

 set $upstream 10.0.1.9:8080; #this is the static zerotier ipv4 address of my computer at home with the port I have DEVONthink pro office web listening on.

 location / {

 proxy_pass_header Authorization;
 proxy_pass http://$upstream;
 proxy_set_header Host $host;
 proxy_set_header X-Real-IP $remote_addr;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_http_version 1.1;
 proxy_set_header Connection "";
 proxy_buffering off;
 client_max_body_size 0;
 proxy_read_timeout 36000s;
 proxy_redirect off;
 proxy_ssl_session_reuse off;

 }

}

```

---

<div class="post-metadata">

### Author: ![korm](https://discourse.devontechnologies.com/letter_avatar_proxy/v4/letter/k/e0b2c6/32.png) [@korm](https://discourse.devontechnologies.com/u/korm)
#### Post date: [November 7, 2017, 11:11am UTC](https://discourse.devontechnologies.com/t/tip-secure-access-to-the-web-server/23116/2 "2017-11-07T11:11:05Z")

</div>

Outrageous wicked amazing. ![:mrgreen:](https://devontech-discourse.s3.dualstack.us-east-1.amazonaws.com/uploads/original/1X/442e459c5ced45cb70e8a05e77e07cea6fee4928.gif "Mr. Green")

---

<div class="post-metadata">

### Author: ![chris85](https://discourse.devontechnologies.com/letter_avatar_proxy/v4/letter/c/258eb7/32.png) [@chris85](https://discourse.devontechnologies.com/u/chris85)
#### Post date: [January 12, 2018, 4:17pm UTC](https://discourse.devontechnologies.com/t/tip-secure-access-to-the-web-server/23116/3 "2018-01-12T16:17:09Z")

</div>

Hi,

Does anybody has an solution, for nginx proxy with a sublimation  
My try was

set $upstream 192.168.0.22:2222; # My IP and Port of DT Webinterface

```
    location /dtw {
            rewrite ^/dtw(.*)$ /$1 break;
            proxy_pass_header Authorization;
            proxy_pass [$upstream/;](http://$upstream/;)
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_http_version 1.1;
            proxy_set_header Connection "";
            proxy_buffering off;
            proxy_read_timeout 36000s;
            proxy_redirect off;
            proxy_ssl_session_reuse off;
    }

```

But with this location, the login window pops up, but I can’t login

Thanks for any solution.

Chris

---

<div class="post-metadata">

### Author: ![tbjerch](https://discourse.devontechnologies.com/letter_avatar_proxy/v4/letter/t/f17d59/32.png) [@tbjerch](https://discourse.devontechnologies.com/u/tbjerch)
#### Post date: [March 30, 2019, 4:43pm UTC](https://discourse.devontechnologies.com/t/tip-secure-access-to-the-web-server/23116/4 "2019-03-30T16:43:14Z")

</div>

Have exact same problem. Did you find a solution?

---

<div class="post-metadata">

### Author: ![hjm79](https://discourse.devontechnologies.com/user_avatar/discourse.devontechnologies.com/hjm79/32/23819_2.png) [@hjm79](https://discourse.devontechnologies.com/u/hjm79)
#### Post date: [February 1, 2022, 10:42am UTC](https://discourse.devontechnologies.com/t/tip-secure-access-to-the-web-server/23116/5 "2022-02-01T10:42:16Z")

</div>

Have exact same problem. Did you find a solution?