Serve Let's Encrypt certificates for stratum TLS on public domains

This commit is contained in:
2026-08-01 06:31:15 +03:00
parent 703ca1b559
commit f118c153a0
11 changed files with 369 additions and 95 deletions
+4 -3
View File
@@ -2,7 +2,7 @@ export const DEFAULT_LANG = 'en_US'
const dict = {
'(not yet generated — start the service once)': 0,
'Accept stratum connections over TLS via an stunnel sidecar on a second port. A self-signed certificate is generated once and persisted — miners must trust the certificate (see the Stratum TLS Certificate action) or connect with verification disabled.': 1,
'Serve the self-signed certificate on the TLS stratum port, for miners on your local network. Miners have to trust it (see the Stratum TLS Certificate action) or connect with verification disabled. You do NOT need this for miners connecting over a public domain: attach the domain to the Stratum (TLS) interface and StartOS issues a publicly trusted certificate automatically.': 1,
'All block submissions confirmed': 2,
'All latency counters (count, avg, last, wasted work) have been cleared. New measurements will accumulate from the next block.': 3,
'Already absent': 4,
@@ -67,7 +67,7 @@ const dict = {
'TLS certificate cleared — restart the service to generate a new one': 63,
'TLS stratum is accepting connections': 64,
'TLS stratum is not accepting connections': 65,
'TLS-encrypted stratum endpoint (self-signed certificate see the Stratum TLS Certificate action)': 66,
'TLS-encrypted stratum endpoint. Miners on a public domain attached here get a CA-issued certificate automatically; on the local network the self-signed certificate is used (see the Stratum TLS Certificate action)': 66,
'The Kamado dashboard is not reachable': 67,
'The Kamado dashboard is reachable': 68,
'The stratum server is accepting connections': 69,
@@ -88,7 +88,8 @@ const dict = {
'Stratum TLS Port': 84,
'TCP port stunnel accepts TLS stratum connections on. Only used when Stratum TLS is enabled below.': 85,
'Network port your miners connect to for plaintext stratum. StartOS publishes the pool on this port; if it is already claimed by another service the OS assigns a different one, so check the Stratum interface after saving. Changing this does not interrupt connected miners.': 86,
'Network port your miners connect to for TLS stratum. Only used when Stratum TLS is enabled below.': 87,
'Network port your miners connect to for TLS stratum — both for the local self-signed certificate and for any public domain attached to the Stratum (TLS) interface.': 87,
'Stratum TLS (Local Network)': 88,
} as const
/**