[digiltd]

Would you mind explaining if there is any configuration required on the Heroku side to get this to work? I'm guessing possibly not as it's a public certificate right?

Also, I currently run an Ubuntu server for plex, tvheadend, file server etc. Is there much of a security risk running nginx on that or would I be better off putting it on a spare pi I have?

You would need to make a small adjustment to kodi.py to enable https

Change the following (currently at line 94)

Code:

url = "http://%s:%d/jsonrpc" % (KODI, PORT)

to

Code:

url = "https://%s:%d/jsonrpc" % (KODI, PORT)

You could install on the same machine, though to be safer and to have more control then install it on a Pi because your Kodi install is on what sounds an important box on of your network.

You can also deny connections from all IPs other than those you specify. Heroku might publish the ip range they use, AWS do and you can filter by service and region. This lets me only allow requests from AWS Lambda in the EU region