Webtunnel questions

[SirNeo]

I have searched the forum questions and google a bit but i can’t find the answer for my questions

1. If i want to host 3 webtunnels i need 3 domains (domain1.com domain2.com domain3.com) or is enought to have 3 subdomains (subomain1.domain.com / subdomain2.domain.com / subdomain3.domain.com)

2. Do you have any ideea if the censors when ban the tunnels they are banning only the domain or also the ip address?

3. Is OK to leave the default nginx page or should i complicate my life and put a static website as placeholder? The domain.com/path is used by users but if the censor enter on domain.com and sees a default page is not suspicious?
   Or maybe instead a dummy page to configure an auto forwarding to another page? Let’s say a game or a shop has a legit page .com and i build a .de .es whatever page that redirects in 15 seconds to legit page and the /path is used by people that are restricted.

4. Can someone explain to me the auto renew the TLS certificate? I didn’t think i did that when i used this (which is the best tutorial around here, i have tried before using oficial documentation and failed twice) and i don’t know how to do it

[atari]

@SirNeo

If i want to host 3 webtunnels i need 3 domains (domain1.com domain2.com domain3.com) or is enought to have 3 subdomains (subomain1.domain.com / subdomain2.domain.com / subdomain3.domain.com)

Technically 3 subdomains would work. Separate domains would be much better.

@SirNeo

Do you have any ideea if the censors when ban the tunnels they are banning only the domain or also the ip address?

Guess me as a censor would ban both, better safe than sorry

@SirNeo

Is OK to leave the default nginx page or should i complicate my life and put a static website as placeholder? The domain.com/path is used by users but if the censor enter on domain.com and sees a default page is not suspicious?
Or maybe instead a dummy page to configure an auto forwarding to another page? Let’s say a game or a shop has a legit page .com and i build a .de .es whatever page that redirects in 15 seconds to legit page and the /path is used by people that are restricted.

The more legit the site looks the less suspicions it will raise. Be creative, put some more flapdoodle on the web to meld in → Static Site Generators - Top Open Source SSGs | Jamstack best used in combination with your favorite generative AI for text, images and videos…

@SirNeo

Can someone explain to me the auto renew the TLS certificate? I didn’t think i did that when i used this (which is the best tutorial around here, i have tried before using oficial documentation and failed twice) and i don’t know how to do it

Following that instructions should lead to a cronjob taking care of renewals. Its located at /etc/cron.d/certbot

[bakunin1848]

1.You can use subdomains, Each one has its own path if you want to have one public and another for personal use

2.They usually ban the domain using WAF or similar mechanisms since behind an IP there may be legitimate sites or affect other sites if it is an IP of a CDN that has several domains behind the same IP (ex cloudflare)

3. It can help but in the end if they focus on knowing if it is a Bridge they will know unless it is private and you share it with a closed circle in which case I would not even put a page personally

4. I don’t know which CA you use, but Certbot is very well documented for a Let’s Encrypt certificate and for it to auto-renew (there are different very well-documented methods).