NGINX

✅ NGINX Configuration

⚠️ Setup NGINX reverse proxy with SSL for all Namada services.

Replace placeholders:

• yourdomain.com - Your actual domain

• your-server-ip - Your server's public IP

• [email protected] - Your email for SSL certificates

🛠 Domain & DNS Configuration

1 Buy a Domain

Register a domain: yourdomain.com

2 Check Server IP

wget -qO- eth0.me

3 Configure DNS A-Records

Go to your hosting provider’s DNS settings and add the following A-Records: (Domain > DNS Settings > Records > Add A-record)

Configure DNS A-Records: rpc, namadillo, indexer, masp-indexer

housefire.rpc.yourdomain.com #RPC Server housefire.ui.yourdomain.com #Namadillo UI housefire.indexer.yourdomain.com #Indexer API housefire.masp-indexer.yourdomain.com #MASP Indexer

Each A-Record should point to <your-server-ip>: housefire.rpc housefire.ui housefire.indexer housefire.masp-indexer

🛠 Install & Configure NGINX

4 Install Certbot for SSL

sudo apt update
sudo apt install certbot python3-certbot-nginx -y

5 Obtain SSL Certificates

certbot --nginx -d housefire.rpc.yourdomain.com \
-d housefire.ui.yourdomain.com \
-d housefire.indexer.yourdomain.com \
-d housefire.masp-indexer.yourdomain.com \
-m [email protected] \
--agree-tos \
--noninteractive \
--redirect

6 Verify SSL Certificates

ls -lah /etc/letsencrypt/live/

🛠 Configure NGINX Reverse Proxy

7 Create NGINX Configuration File

sudo nano /etc/nginx/sites-enabled/housefire_conf

Edit & Paste the following configuration:

# Redirect all HTTP traffic to HTTPS
server {
    listen 80;
    listen [::]:80;
    server_name housefire.rpc.yourdomain.com housefire.ui.yourdomain.com housefire.indexer.yourdomain.com housefire.masp-indexer.yourdomain.com;
    return 301 https://$host$request_uri;
}

# 🔥 Namadillo UI (Housefire UI)
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name housefire.ui.yourdomain.com;

    ssl_certificate /etc/letsencrypt/live/housefire.ui.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/housefire.ui.yourdomain.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;

    location / {
        root /var/www/namadillo/apps/namadillo/dist;
        index index.html;
        try_files $uri /index.html;
    }
}

# 🛠️ RPC Server for Namada
upstream namada_rpc {
    server 127.0.0.1:26657;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name housefire.rpc.yourdomain.com;

    ssl_certificate /etc/letsencrypt/live/housefire.rpc.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/housefire.rpc.yourdomain.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;

    location / {
        proxy_pass http://namada_rpc;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

# 🏆 Indexer API
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name housefire.indexer.yourdomain.com;

    ssl_certificate /etc/letsencrypt/live/housefire.indexer.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/housefire.indexer.yourdomain.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;

    location / {
        proxy_pass http://127.0.0.1:5001/;
        proxy_http_version 1.1;
    }
}

# 🌟 MASP Indexer
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name housefire.masp-indexer.yourdomain.com;

    ssl_certificate /etc/letsencrypt/live/housefire.masp-indexer.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/housefire.masp-indexer.yourdomain.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;

    location / {
        proxy_pass http://127.0.0.1:5000/;
        proxy_http_version 1.1;
    }
}

🛠 Final NGINX Setup

8 Remove Default NGINX Config

sudo rm /etc/nginx/sites-enabled/default

9 Test NGINX Configuration

sudo nginx -t

10 Restart NGINX

sudo systemctl daemon-reload
sudo systemctl restart nginx
service nginx status

11 Allow NGINX Traffic in UFW

sudo ufw allow 'Nginx Full'
sudo ufw status

🔍 Verify Setup

1 Check SSL Certificates

curl -vk https://housefire.rpc.yourdomain.com/
curl -vk https://housefire.indexer.yourdomain.com/health
curl -vk https://housefire.ui.yourdomain.com/
curl -vk https://housefire.masp-indexer.yourdomain.com/api/v1/height

2 Test SSL Grade

Visit: SSL Labs Test and test your domains:

• housefire.rpc.yourdomain.com

• housefire.indexer.yourdomain.com

• housefire.ui.yourdomain.com

• housefire.masp-indexer.yourdomain.com

🚀 Force SSL Renewal if Needed

certbot renew --force-renewal

🛠 Troubleshooting

1 Check NGINX Logs

sudo tail -f /var/log/nginx/error.log

2 Remove & Reinstall SSL Certificates

certbot delete --cert-name housefire.rpc.yourdomain.com
certbot delete --cert-name housefire.indexer.yourdomain.com
certbot delete --cert-name housefire.ui.yourdomain.com
certbot delete --cert-name housefire.masp-indexer.yourdomain.com

certbot --nginx \
  -d housefire.rpc.yourdomain.com \
  -d housefire.indexer.yourdomain.com \
  -d housefire.ui.yourdomain.com \
  -d housefire.masp-indexer.yourdomain.com \
  --email [email protected] \
  --agree-tos \
  --noninteractive \
  --redirect

3 Restart Everything

sudo systemctl restart nginx