2016-12-30 09:41:22 +00:00
<!-- BANNER_TPL_BEGIN -->
2016-12-30 09:23:12 +00:00
About Daplie: We're taking back the Internet!
2016-11-25 17:36:14 +00:00
--------------
2016-12-30 09:23:12 +00:00
Down with Google, Apple, and Facebook!
We're re-decentralizing the web and making it read-write again - one home cloud system at a time.
Tired of serving the Empire? Come join the Rebel Alliance:
2016-11-25 17:36:14 +00:00
2016-12-30 09:23:12 +00:00
< a href = "mailto:jobs@daplie.com" > jobs@daplie.com</ a > | [Invest in Daplie on Wefunder ](https://daplie.com/invest/ ) | [Pre-order Cloud ](https://daplie.com/preorder/ ), The World's First Home Server for Everyone
2016-11-25 17:36:14 +00:00
2016-12-30 09:41:22 +00:00
<!-- BANNER_TPL_END -->
2016-11-25 17:36:14 +00:00
2016-09-30 22:49:08 +00:00
# stunneld.js
A server that works in combination with [stunnel.js ](https://github.com/Daplie/node-tunnel-client )
to allow you to serve http and https from any computer, anywhere through a secure tunnel.
CLI
===
Installs as `stunnel.js` with the alias `jstunnel`
(for those that regularly use `stunnel` but still like commandline completion).
### Install
```bash
2017-05-25 20:50:51 +00:00
npm install -g stunneld
2016-09-30 22:49:08 +00:00
```
2017-10-04 23:37:07 +00:00
Then `dist/etc/systemd/system/stunneld.service` should be copied to `/etc/systemd/system/stunneld.service` and
the ARGUMENTS, such as SECRET, MUST BE CHANGED.
*TODO*: make `--config /path/to/config` the only argument (and have the secret auto-generated on first run?)
2016-09-30 22:49:08 +00:00
### Advanced Usage
How to use `stunnel.js` with your own instance of `stunneld.js` :
```bash
2016-10-01 06:39:20 +00:00
stunneld.js --servernames tunnel.example.com --protocols wss --secret abc123
2016-09-30 22:49:08 +00:00
```
Options
```
--secret the same secret used by stunnel client (used for authentication)
--serve comma separated list of < proto > :< servername > :< port > to which
incoming http and https should be forwarded
```
2016-10-01 06:39:20 +00:00
### Privileged Ports without sudo
```bash
# Linux
sudo setcap 'cap_net_bind_service=+ep' $(which node)
```
2016-09-30 22:49:08 +00:00
### Alterntive Methods
**NOT YET IMPLEMENTED**
We created this for anyone to use on their own server or VPS,
but those generally cost $5 - $20 / month and so it's probably
cheaper to purchase data transfer (which we supply, obviously),
which is only $1/month for most people.
Just use the client ([stunnel.js](https://github.com/Daplie/node-tunnel-client))
with Daplie's tunneling service (the default) and save yourself the monthly fee
by only paying for the data you need.
* Daplie Tunnel (zero setup)
* Heroku (zero cost)
* Chunk Host (best deal per TB/month)
Security
========
The bottom line: As with everything in life, there is no such thing as anonymity
or absolute security. Only use stunneld services that you trust. :D
Even though the traffic is encrypted end-to-end, you can't just trust any stunneld service
willy-nilly.
A man-in-the-middle attack is possible using Let's Encrypt since an evil stunneld service
would be able to complete the http-01 and tls-sni-01 challenges without a problem
(since that's where your DNS is pointed when you use the service).
Also, the traffic could still be copied and stored for decryption is some era when quantum
computers exist (probably never).
