Your server listens on two ports. Each one reaches a different place.
| Port | Reaches | Needs a certificate |
|---|---|---|
| 7717 | The computer running the server | No |
| 443 | Any device, at home or away | Yes |
Port 7717 works as soon as the server starts. Open this on that same computer:
http://127.0.0.1:7717/webclient/That page is served by your own server. Nothing else is needed.
#Why a phone needs more
A browser only runs Recued from a safe address. An https address is
safe. A plain http address is not.
There is one exception. Your browser trusts 127.0.0.1. That address can
only mean the computer you are sitting at.
Your phone cannot use it. Your phone needs a real https address. That
means a certificate.
One more thing is worth knowing. Port 443 serves both the visitor page and the app. So you only ever open one port.
#Three free ways to get a certificate
#Tailscale
Tailscale builds a small private network across your devices. It hands out real certificates. It needs no open ports at all.
Install it on your server and on your phone. Then run this on the server:
tailscale cert my-server.my-tailnet.ts.net
tailscale serve --bg https / http://127.0.0.1:7717Now open that same name on your phone. It works at home and away.
#Caddy
Caddy is a small web server. It fetches and renews certificates for you. You need a domain name for this one.
Put this in a file called Caddyfile:
recued.example.com {
reverse_proxy 127.0.0.1:7717
}Then run caddy run. Point your domain at your home address first.
#A certificate you already have
Some people already own a domain and a certificate. Upload it under Settings, then Server, then Certificates.
#Which one to pick
| You have | Pick |
|---|---|
| No domain name | Tailscale |
| A domain name | Caddy |
| A domain and a certificate | Upload it |
Recued Pro does this step for you. It gives the server a name. It keeps the certificate fresh. You still open one router port, as below.
#Using it away from home
At home a certificate is enough. Away from home there is one more step. Your router has to let port 443 through to your server.
Tailscale is the exception. It needs no router change at all.
You cannot see the answer from inside your own network. Recued can ask from outside instead. Open Settings, then Server, then Connect a device. The router step there has a button called Check this now.
A check that gets in ticks the step. A check that does not tells you to open your router settings. If nothing has checked yet, the step says so rather than guessing.