mirror of
https://github.com/Start9Labs/documentation.git
synced 2026-04-04 22:39:44 +00:00
Big refactor, many minor fixes (#441)
* Big refactor, many minor fixes * Link fixes, icon edits * Index and ToC fixes * update icons in theme lib and add to device guides index * WIP - refactor Initial setup, LAN, FF, others * First draft ready, many fixes and edits * Ooops - minor edits and changes on initial setup * Add change password guide (try 2). * Remove change password menu item from guides * Fix display bug, think different --------- Co-authored-by: Lucy Cifferello <12953208+elvece@users.noreply.github.com> Co-authored-by: gStart9 <george@start9labs.com>
This commit is contained in:
kn0wmad
39
site/source/guides/device-guides/dg-ios/index.rst
Normal file
39
site/source/guides/device-guides/dg-ios/index.rst
Normal file
@@ -0,0 +1,39 @@
|
||||
.. _dg-ios:
|
||||
|
||||
===
|
||||
iOS
|
||||
===
|
||||
To optimize your device for use with your Start9 server, it is recommended to complete all of the following guides.
|
||||
|
||||
.. tip:: Whenever you are connected to the same Local Area Network (LAN) as your Start9 server, it is best to access your Start9 server's LAN Address (.local URL). LAN connections are fast and secure and are available even with no Internet access!
|
||||
|
||||
.. raw:: html
|
||||
|
||||
<div class="topics-grid grid-container full">
|
||||
|
||||
<div class="grid-x grid-margin-x">
|
||||
|
||||
.. topic-box::
|
||||
:title: Trust Root CA
|
||||
:link: lan-ios
|
||||
:icon: scylla-icon scylla-icon--partners
|
||||
:class: large-4
|
||||
:anchor: Connect
|
||||
|
||||
Trust your Start9 server's Root Certificate Authority in order to create encrypted connections.
|
||||
|
||||
.. topic-box::
|
||||
:title: Setup Orbot
|
||||
:icon: scylla-icon scylla-icon--networking
|
||||
:link: tor-ios
|
||||
:class: large-4
|
||||
:anchor: Run Tor
|
||||
|
||||
Run Tor natively (in the background) on your iOS device. This will enable apps to communicate with your Start9 server via the Tor Network, remotely.
|
||||
|
||||
.. toctree::
|
||||
:maxdepth: 4
|
||||
:hidden:
|
||||
|
||||
lan-ios
|
||||
tor-ios
|
||||
88
site/source/guides/device-guides/dg-ios/lan-ios.rst
Normal file
88
site/source/guides/device-guides/dg-ios/lan-ios.rst
Normal file
@@ -0,0 +1,88 @@
|
||||
.. _lan-ios:
|
||||
|
||||
=========================
|
||||
Trust Your Root CA on iOS
|
||||
=========================
|
||||
Complete this guide to download your Start9 server's Root Certificate Authority (CA), and trust it on your client device (iOS). This allows you to use encrypted ``https`` connections to your ``.local`` (LAN) and ``.onion`` (tor) server addresses, access services on LAN, and enhances performance on tor. The self-signed certificate was created by your server when you perfomed the initial setup, and applies to your server's main UI connection, as well as all service connections.
|
||||
|
||||
This applies to iOS v15 and v16. For older versions, see the `v14 guide </0.3.1.x/user-manual/connecting/connecting-lan/lan-os/lan-ios>`_.
|
||||
|
||||
#. Download the certificate to your Downloads folder
|
||||
|
||||
.. note::
|
||||
In order to do this, open Safari and visit your Start9 server's .local URL while connected to WiFi, but make sure it is prefixed with ``http://`` and not ``https://``.
|
||||
|
||||
Log in using your password, then click the hamburger (3 lines) menu at the top right, select System > LAN > Download Certificate. It may say `This website is trying to download a configuration profile. Do you want to allow this?` Click `Allow`.
|
||||
|
||||
Once this is done, you can skip to step 3, below.
|
||||
|
||||
If you downloaded the certificate from a browser such as Firefox, you will need to copy the file from that Downloads folder to your iCloud Downloads folder. Navigate there via `Files > iCloud Drive > Downloads`. Otherwise, the "Profile Download" dialog will not appear when you click on the file in the next step.
|
||||
|
||||
#. Open your iCloud Downloads folder and click on the certificate. It will display a dialog box that says "Profile Downloaded." Click `Close`.
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/import_cert.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
#. Head to *Settings > General > VPN & Device Management*
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/settings_general_vpn.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
#. Locate the profile under "DOWNLOADED PROFILE" and tap on it
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/install_1.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
#. Tap *Install*
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/install_2.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
#. Tap *Install* again
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/install_3.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
#. Tap *Install* yet again
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/install_4.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
#. You should see green text with a check-mark saying "Verified" under the Profile Installed dialog.
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/install_5.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
#. Tap *Done* near the top right.
|
||||
|
||||
#. Next, navigate to *General > About > Certificate Trust Settings*.
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/trust_1.png
|
||||
:width: 20%
|
||||
:alt: Certificate trust settings
|
||||
|
||||
#. Under "Enable full trust for root certificates", enable your "<custom-address> Local Root CA".
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/trust_2.png
|
||||
:width: 20%
|
||||
:alt: Enable full trust
|
||||
|
||||
#. Tap *Continue*
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/trust_3.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
#. Your certificate should now be installed and trusted:
|
||||
|
||||
.. figure:: /_static/images/ssl/ios/trust_4.png
|
||||
:width: 20%
|
||||
:alt: Profiles
|
||||
|
||||
29
site/source/guides/device-guides/dg-ios/tor-ios.rst
Normal file
29
site/source/guides/device-guides/dg-ios/tor-ios.rst
Normal file
@@ -0,0 +1,29 @@
|
||||
.. _tor-ios:
|
||||
|
||||
==================
|
||||
Running Tor on iOS
|
||||
==================
|
||||
|
||||
Running Orbot
|
||||
-------------
|
||||
Orbot is a system-wide proxy for your Android device that enables communications over Tor.
|
||||
|
||||
#. Download and install `Orbot from the Apple appstore <https://apps.apple.com/us/app/orbot/id1609461599>`_.
|
||||
#. Open Orbot and tap on "Settings".
|
||||
#. Activate the "Disable Orbot for non-onion traffic" setting:
|
||||
|
||||
.. figure:: /_static/images/tor/ios-orbot-settings-oniononlymode.png
|
||||
:width: 25%
|
||||
:alt: iOS Orbot -> Settings -> Onion-Only Mode
|
||||
|
||||
#. Go back to the main screen and click "Start" and you will see Tor connect:
|
||||
|
||||
.. figure:: /_static/images/tor/ios-orbot-connecting-full.png
|
||||
:width: 35%
|
||||
:alt: iOS Orbot Connecting to Tor
|
||||
|
||||
#. Apps will now work transparently when requesting onion urls!
|
||||
|
||||
Access Onionsites
|
||||
-----------------
|
||||
Once Orbot is setup on your system as you've just done, you don't need any browser configuration. All browsers in iOS are Safari under the hood, and this Orbot configuration enables access to ``.onion`` URLs. Regular clearnet requests will not use tor.
|
||||
Reference in New Issue
Block a user