Blue Iris Digital Download: Configuring Nginx Reverse Proxy for Seamless Access

As a Blue Iris user, you're likely familiar with the importance of securing your CCTV setup while maintaining seamless access to your digital downloads. In this article, we'll explore how to configure nginx reverse proxy to ensure a secure and efficient connection between your web server and Blue Iris application.

To begin, make sure you have a proper A record set up for your primary/root domain in BIND or your DNS provider. This is crucial for accessing the subdomain via a wildcard-based SSL certificate. If using bind, be sure to configure a wildcard A name in addition to the non-WWW based domain.

For this setup, we'll assume you're running Blue Iris version 5 or newer and have already created a wildcard-based SSL certificate for the reverse proxy access domain name. You can do this by following the instructions provided by your DNS provider or bind configuration file.

Now, let's dive into configuring nginx reverse proxy. Start by creating a virtual host file in /etc/nginx/sites-available/blueiris. This file will contain the necessary settings to route HTTPS requests from the WAN IP address to the LAN IP address of your Blue Iris server.

In the virtual host file, you'll need to ensure that stunnel is unchecked and the 'Remote' input field is set to your WAN IP address. The 'Local, internal access' input should be set to the LAN IPv4 address of your Blue Iris server. This will allow secure communication between your web server and Blue Iris application.

Next, you'll want to configure the reverse proxy settings in nginx. This can be done by adding the following lines to the virtual host file:

```

http {

...

upstream blueiris {

server localhost:8080;

}

server {

listen 443 ssl;

ssl_certificate /path/to/ssl/cert.crt;

ssl_certificate_key /path/to/ssl/cert.key;

location /blueiris {

proxy_pass http://blueiris;

proxy_set_header Host $host;

proxy_set_header X-Real-IP $remote_addr;

}

```

These settings will allow nginx to internally route HTTPS requests from the WAN IP address to a HTTP request within the LAN to the Blue Iris server.

Finally, ensure that your options look similar to the above image and that you have a proper A record set up for your primary/root domain in BIND or your DNS provider.

With these steps complete, you should now be able to access your Blue Iris application via a subdomain without compromising security. The virtual host file will route HTTPS requests from the WAN IP address to the LAN IP address of your Blue Iris server, ensuring a secure and efficient connection between your web server and Blue Iris application.

By following these instructions, you'll be able to configure nginx reverse proxy for seamless access to your digital downloads while maintaining the security and integrity of your Blue Iris setup.

Blue iris digital download