Connectivity discussion

[frennkie]

The following table is an overview and description of the servers and ports that are provided/opened by blitzd.

		Welcome	Info	REST	gRPC
1	description	Welcome is a HTTP-only (no certificate warning issues!) web server that only provides public general/generic information about blitzd/RaspiBlitz.	Info is a HTTPS-only web server where a Dashboard like page can be viewed (after authentication with user+password. Optionally this also hosts the Swagger-UI REST API documentation.	REST is an API interface that runs on the same port as Info and which provides access to data and services made available by blitzd	gRPC is a HTTP/2 (with TLS mutual auth) server that is the backend service used by blitz-cli	Value in brackets () is the default value
2	enabled	Yes/No (Yes)	Yes/No (Yes)	Yes/No (Yes)	Yes/No (Yes)
3	localhost_only	Yes/No (Yes)	Yes/No (Yes)	Yes/No (Yes)	Yes/No (Yes)
4	TCP Port	39080	39443	39443	39735	e. g.with iptables NAT 80->39080, 443->39443
5	HTTPS/TLS	No	Yes	Yes	Yes
6	Certificate	N/A	Yes	Yes	Yes	either self-signed, signed by self-signed CA or trusted CA (e.g. LE)
7	Authentication	N/A	Basic Auth	Basic Auth	Mutual TLS	Basic Auth PW: in config file?! Mutual: Clients need trusted Cert
8	Tor - enabled	N/A	Yes/No (No)	Yes/No (No)	Yes/No (No)
9	Tor - int Port	N/A	39444	39444	39736
10	Tor - ext Port	N/A	443 + 39443	443 + 39443	39735
11	Tor - HTTPS/TLS	N/A	Yes	Yes	Yes
12	Tor - Cert	N/A	Yes	Yes	Yes	should definitely not be the same as above in line 6. So most likely self-signed
13	Tor - Auth	N/A	Basic Auth	Basic Auth	Mutual TLS	same as line 7 ?!