Merge branch 'master' of github.com:Start9Labs/documentation into feature/service-sdk
45
README.md
@@ -2,6 +2,31 @@
|
|||||||
|
|
||||||
At Start9, we see great value in maintaining clear and accurate documentation for our already simple and friendly products. These docs are a continuous work-in-progress, and we welcome contributions from our partners and customers.
|
At Start9, we see great value in maintaining clear and accurate documentation for our already simple and friendly products. These docs are a continuous work-in-progress, and we welcome contributions from our partners and customers.
|
||||||
|
|
||||||
|
## Runbook
|
||||||
|
|
||||||
|
This project uses [Sphinx](https://www.sphinx-doc.org/en/master/usage/installation.html) and [Restructured Text](https://thomas-cokelaer.info/tutorials/sphinx/rest_syntax.html)
|
||||||
|
|
||||||
|
### Dependencies
|
||||||
|
|
||||||
|
Install [python3](https://docs.python-guide.org/starting/install3/osx/)
|
||||||
|
|
||||||
|
Install sphinx and dependencies:
|
||||||
|
```
|
||||||
|
brew install sphinx-doc
|
||||||
|
pip3 install sphinx-autobuild
|
||||||
|
pip3 install sphinx-book-theme
|
||||||
|
```
|
||||||
|
|
||||||
|
### Development
|
||||||
|
|
||||||
|
Run: `sphinx-autobuild source build/html` to activate a live-reload environment on `localhost:8000`.
|
||||||
|
|
||||||
|
The main configuration file for this project is located at `./source/conf.py`.
|
||||||
|
|
||||||
|
The navigation structure is aligned with the folder/file organization under `./source/`. This is where the individual page `.rst` files live and can be edited.
|
||||||
|
|
||||||
|
If any css or table of contents organization changes, run: `make clean html`.
|
||||||
|
|
||||||
## Contributing to the docs
|
## Contributing to the docs
|
||||||
|
|
||||||
If you notice a mistake in the docs, or you have an idea for improving them, we would like to know about it. You can either fix the mistake yourself and submit a pull request, or you can report the mistake by submitting an issue.
|
If you notice a mistake in the docs, or you have an idea for improving them, we would like to know about it. You can either fix the mistake yourself and submit a pull request, or you can report the mistake by submitting an issue.
|
||||||
@@ -12,22 +37,4 @@ Click on the "Issues" tab in the top navbar. Provide a good title and describe c
|
|||||||
|
|
||||||
### Submitting a pull request
|
### Submitting a pull request
|
||||||
|
|
||||||
This project uses [Sphinx](https://www.sphinx-doc.org/en/master/usage/installation.html) and [Restructured Text](https://thomas-cokelaer.info/tutorials/sphinx/rest_syntax.html)
|
Click on the "Pull requests" tab in the top navbar. Select the green "New pull request button" in the top right section. Select your branch for the compare dropdown, and master as the base. Provide an appropriate title and summary of the changes in the pull request description. Changes will be reviewed and merged when satisfactory.
|
||||||
|
|
||||||
Install [python3](https://docs.python-guide.org/starting/install3/osx/)
|
|
||||||
|
|
||||||
Install sphinx and dependencies:
|
|
||||||
```
|
|
||||||
brew install sphinx-doc
|
|
||||||
pip3 install sphinx-autobuild
|
|
||||||
pip3 install sphinx-book-theme
|
|
||||||
```
|
|
||||||
|
|
||||||
run: `sphinx-autobuild source build/html` to activate a live-reload environment on `localhost:8000`.
|
|
||||||
|
|
||||||
|
|
||||||
The main configuration file for this project is located at `./source/conf.py`.
|
|
||||||
|
|
||||||
The navigation structure is aligned with the folder/file organization under `./source/`. This is where the individual page `.rst` files live and can be edited.
|
|
||||||
|
|
||||||
If any css or table of contents organization changes, run: `make clean html`.
|
|
||||||
@@ -70,7 +70,12 @@ h1, h2 {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
ul .current li .current {
|
|
||||||
|
a:active {
|
||||||
|
text-decoration: none;
|
||||||
|
}
|
||||||
|
|
||||||
|
ul.current > .current .active > a.current {
|
||||||
text-decoration: underline #f8f8ff;
|
text-decoration: underline #f8f8ff;
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -91,7 +96,8 @@ code {
|
|||||||
|
|
||||||
@media (min-width: 1200px){
|
@media (min-width: 1200px){
|
||||||
.container, .container-lg, .container-md, .container-sm, .container-xl {
|
.container, .container-lg, .container-md, .container-sm, .container-xl {
|
||||||
max-width: 2200px;
|
max-width: 2200px;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
.container-fluid, .container-lg, .container-md, .container-sm, .container-xl {
|
.container-fluid, .container-lg, .container-md, .container-sm, .container-xl {
|
||||||
@@ -145,4 +151,12 @@ code {
|
|||||||
width: 90%;
|
width: 90%;
|
||||||
margin: 0 0 1em 1.5em;
|
margin: 0 0 1em 1.5em;
|
||||||
}
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
.caption > i {
|
||||||
|
display: none;
|
||||||
|
}
|
||||||
|
|
||||||
|
nav.bd-links .fa-chevron-up:hover, nav.bd-links .fa-chevron-down:hover {
|
||||||
|
color: #ff4960;
|
||||||
}
|
}
|
||||||
BIN
source/_static/images/bitcoin_instructions.png
Normal file
|
After Width: | Height: | Size: 500 KiB |
BIN
source/_static/images/bitcoin_instructions_view.png
Normal file
|
After Width: | Height: | Size: 774 KiB |
BIN
source/_static/images/embassy_lan_setup.png
Normal file
|
After Width: | Height: | Size: 296 KiB |
BIN
source/_static/images/embassy_version.png
Normal file
|
After Width: | Height: | Size: 278 KiB |
BIN
source/_static/images/secure_lan_setup_page.png
Normal file
|
After Width: | Height: | Size: 342 KiB |
BIN
source/_static/images/secure_lan_setup_prompt.png
Normal file
|
After Width: | Height: | Size: 498 KiB |
BIN
source/_static/images/ssl/browser/brave_security_settings.png
Normal file
|
After Width: | Height: | Size: 180 KiB |
BIN
source/_static/images/ssl/browser/brave_view_certs.png
Normal file
|
After Width: | Height: | Size: 176 KiB |
BIN
source/_static/images/ssl/browser/firefox_security_settings.png
Normal file
|
After Width: | Height: | Size: 150 KiB |
BIN
source/_static/images/ssl/browser/firefox_view_certs.png
Normal file
|
After Width: | Height: | Size: 185 KiB |
BIN
source/_static/images/ssl/macos/always_trust.png
Normal file
|
After Width: | Height: | Size: 988 KiB |
BIN
source/_static/images/ssl/macos/certificate_trusted.png
Normal file
|
After Width: | Height: | Size: 1.1 MiB |
BIN
source/_static/images/ssl/macos/certificate_untrusted.png
Normal file
|
After Width: | Height: | Size: 1.1 MiB |
|
After Width: | Height: | Size: 488 KiB |
BIN
source/_static/images/ssl/mobile/ssl_ipad_cert_trust.PNG
Normal file
|
After Width: | Height: | Size: 472 KiB |
|
After Width: | Height: | Size: 557 KiB |
BIN
source/_static/images/ssl/mobile/ssl_ipad_general_settings.PNG
Normal file
|
After Width: | Height: | Size: 532 KiB |
BIN
source/_static/images/ssl/mobile/ssl_ipad_install_profile.PNG
Normal file
|
After Width: | Height: | Size: 481 KiB |
BIN
source/_static/images/ssl/mobile/ssl_ipad_profiles.PNG
Normal file
|
After Width: | Height: | Size: 464 KiB |
BIN
source/_static/images/ssl/mobile/ssl_setup_app_advanced.PNG
Normal file
|
After Width: | Height: | Size: 226 KiB |
BIN
source/_static/images/ssl/mobile/ssl_setup_app_complete.PNG
Normal file
|
After Width: | Height: | Size: 208 KiB |
BIN
source/_static/images/ssl/windows/1_windows_mmc.png
Normal file
|
After Width: | Height: | Size: 319 KiB |
BIN
source/_static/images/ssl/windows/2_windows_console_root.png
Normal file
|
After Width: | Height: | Size: 46 KiB |
BIN
source/_static/images/ssl/windows/3_windows_add_certificates.png
Normal file
|
After Width: | Height: | Size: 76 KiB |
BIN
source/_static/images/ssl/windows/4_windows_selected_snapin.png
Normal file
|
After Width: | Height: | Size: 78 KiB |
|
After Width: | Height: | Size: 126 KiB |
BIN
source/_static/images/ssl/windows/6_windows_import_cert.png
Normal file
|
After Width: | Height: | Size: 130 KiB |
|
After Width: | Height: | Size: 131 KiB |
|
After Width: | Height: | Size: 132 KiB |
BIN
source/_static/images/ssl/windows/windows_download_cert.png
Normal file
|
After Width: | Height: | Size: 99 KiB |
BIN
source/_static/images/ssl/windows/windows_embassy_menu.png
Normal file
|
After Width: | Height: | Size: 72 KiB |
BIN
source/_static/images/ssl/windows/windows_lan_page.png
Normal file
|
After Width: | Height: | Size: 95 KiB |
@@ -74,6 +74,7 @@ html_theme_options = {
|
|||||||
"use_issues_button": True,
|
"use_issues_button": True,
|
||||||
"use_repository_button": True,
|
"use_repository_button": True,
|
||||||
"extra_navbar": "",
|
"extra_navbar": "",
|
||||||
|
"show_navbar_depth": 1,
|
||||||
}
|
}
|
||||||
html_logo = "_static/logo.png"
|
html_logo = "_static/logo.png"
|
||||||
html_title = "Docs"
|
html_title = "Docs"
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
#############
|
#########################
|
||||||
Documentation
|
Start9 Labs Documentation
|
||||||
#############
|
#########################
|
||||||
|
|
||||||
Welcome to the docs!
|
Welcome to the docs!
|
||||||
|
|
||||||
@@ -18,7 +18,7 @@ Here you will find guidance and information about the Start9 Embassy personal se
|
|||||||
:caption: User Manuals
|
:caption: User Manuals
|
||||||
|
|
||||||
user-manuals/embassyos/index
|
user-manuals/embassyos/index
|
||||||
user-manuals/services/index
|
user-manuals/available-services/index
|
||||||
|
|
||||||
.. toctree::
|
.. toctree::
|
||||||
:maxdepth: 2
|
:maxdepth: 2
|
||||||
|
|||||||
@@ -86,3 +86,17 @@ Is there a product warranty?
|
|||||||
Yes. Start9 commits to serving each beta Embassy product released until the wild. We commit, to the best of our ability, to resolve any issue encountered with our provided hardware or software in a personalized matter until resolved.
|
Yes. Start9 commits to serving each beta Embassy product released until the wild. We commit, to the best of our ability, to resolve any issue encountered with our provided hardware or software in a personalized matter until resolved.
|
||||||
|
|
||||||
Do not hesitate to :ref:`contact`. We strive to also provide quality and available customer service upfront.
|
Do not hesitate to :ref:`contact`. We strive to also provide quality and available customer service upfront.
|
||||||
|
|
||||||
|
|
||||||
|
Can I run EmbassyOS on a VPS or VM?
|
||||||
|
===================================
|
||||||
|
|
||||||
|
No, and we do not advise this. It is designed to be used on a RaspberryPi.
|
||||||
|
|
||||||
|
|
||||||
|
Is it possible to DIY the EmbassyOS on my own hardware?
|
||||||
|
=======================================================
|
||||||
|
|
||||||
|
In the near future, you will be able to purchase EmbassyOS from us online. This will be great for people who already own the necessary hardware or who live outside the US and want to save on shipping and customs fees.
|
||||||
|
|
||||||
|
Additionally, the source code will soon be made available online. If you have the time and energy, it will be possible to download and compile EmbassyOS yourself, for free, with the caveat that your "Embassy" will not have a product key generated by us. This means you will miss out on the perks that come along with purchasing from us, which will grow over time.
|
||||||
15
source/user-manuals/available-services/index.rst
Normal file
@@ -0,0 +1,15 @@
|
|||||||
|
.. _available-services:
|
||||||
|
|
||||||
|
******************
|
||||||
|
Available Services
|
||||||
|
******************
|
||||||
|
|
||||||
|
A list of currently released services for EmbassyOS. Links to the wrapper repository that contains advanced instructions and integration guides.
|
||||||
|
|
||||||
|
`Bitcoin <https://github.com/Start9Labs/bitcoind-wrapper>`_
|
||||||
|
|
||||||
|
`Bitwarden <https://github.com/Start9Labs/filebrowser-wrapper>`_
|
||||||
|
|
||||||
|
`Cups <https://github.com/Start9Labs/cups-wrapper>`_
|
||||||
|
|
||||||
|
`File Browser <https://github.com/Start9Labs/filebrowser-wrapper>`_
|
||||||
@@ -5,4 +5,5 @@ Developer Options
|
|||||||
.. toctree::
|
.. toctree::
|
||||||
:maxdepth: 2
|
:maxdepth: 2
|
||||||
|
|
||||||
ssh-setup
|
ssh-setup
|
||||||
|
alt-marketplace
|
||||||
20
source/user-manuals/embassyos/general/index.rst
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
*******
|
||||||
|
General
|
||||||
|
*******
|
||||||
|
|
||||||
|
An overview of EmbassyOS general capabilities.
|
||||||
|
|
||||||
|
Features
|
||||||
|
========
|
||||||
|
|
||||||
|
.. toctree::
|
||||||
|
:maxdepth: 2
|
||||||
|
|
||||||
|
embassy-config
|
||||||
|
updating
|
||||||
|
wifi
|
||||||
|
developer-options/index
|
||||||
|
power
|
||||||
|
notifications
|
||||||
|
secure-lan/index
|
||||||
|
forgot-password
|
||||||
87
source/user-manuals/embassyos/general/secure-lan/browser.rst
Normal file
@@ -0,0 +1,87 @@
|
|||||||
|
.. _browsers:
|
||||||
|
|
||||||
|
*******
|
||||||
|
Browser
|
||||||
|
*******
|
||||||
|
|
||||||
|
.. warning:: Make sure you have completed setup on your :ref:`device <ssl-setup>` before continuing!
|
||||||
|
|
||||||
|
Brave
|
||||||
|
=====
|
||||||
|
|
||||||
|
1. Navigate to your Brave Settings in a new tab.
|
||||||
|
|
||||||
|
2. On the left hand sidebar, select ``Additional Settings > Privacy and Security``.
|
||||||
|
|
||||||
|
3. Add the bottom of the section, select "Manage Certificates".
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/browser/brave_security_settings.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Brave security settings
|
||||||
|
|
||||||
|
Brave privacy and security settings page
|
||||||
|
|
||||||
|
4. If you see a trusted “Embassy Local Root CA”, open a new tab to apply the certificate. If this does not work, quit and restart Brave.
|
||||||
|
|
||||||
|
5. If you do not see a trusted “Embassy Local Root CA” certificate in the list, ensure the certificate is properly set up on your computer system.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/browser/brave_view_certs.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Brave manage certs
|
||||||
|
|
||||||
|
Brave Manage Certificates sub-menu on MacOS
|
||||||
|
|
||||||
|
6. Obtain the LAN address provided in the Setup App and enter it in a new tab.
|
||||||
|
|
||||||
|
7. You can now securely navigate to your Embassy over HTTPS!
|
||||||
|
|
||||||
|
8. Additionally, you can start a Brave private window with Tor to visit the Tor address over HTTPS (unnecessary in principle, but will circumvent annoying browser warnings).
|
||||||
|
|
||||||
|
Chrome
|
||||||
|
======
|
||||||
|
|
||||||
|
1. Once you have followed the steps to setup your device, open a new tab to apply the certificate. If this does not work, quit and restart Chrome.
|
||||||
|
|
||||||
|
2. Obtain the LAN address provided in the Setup App and enter it in the URL bar.
|
||||||
|
|
||||||
|
3. You can now securely navigate to your Embassy over HTTPS!
|
||||||
|
|
||||||
|
Firefox
|
||||||
|
========
|
||||||
|
|
||||||
|
1. Navigate to your Firefox Settings in a new tab.
|
||||||
|
|
||||||
|
2. Select “Privacy and Security” from the left hand navigation menu.
|
||||||
|
|
||||||
|
3. Scroll all the way to the bottom of the page and select “View Certificates”.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/browser/firefox_security_settings.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Firefox security settings
|
||||||
|
|
||||||
|
Firefox privacy and security settings page
|
||||||
|
|
||||||
|
4. Click “Import” and open the downloaded ``Embassy Local Root CA.crt`` file on your device. If you cannot find this, make sure you completed the :ref:`device setup steps <ssl-setup>`.
|
||||||
|
|
||||||
|
5. When prompted, check “Trust this CA to identity websites” and select “OK”.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/browser/firefox_security_settings.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Firefox import cert
|
||||||
|
|
||||||
|
Firefox import certificate page
|
||||||
|
|
||||||
|
6. Ensure the “Embassy Local Root CA” exists under “Start9 Labs”.
|
||||||
|
|
||||||
|
7. Click “OK” to save.
|
||||||
|
|
||||||
|
8. Open a new tab in Firefox to apply the changes. If this does not work, quit and restart Firefox.
|
||||||
|
|
||||||
|
9. Navigate to the LAN address provided in the Setup App.
|
||||||
|
|
||||||
|
10. You can now securely navigate to your Embassy over HTTPS!
|
||||||
|
|
||||||
|
Safari
|
||||||
|
======
|
||||||
|
|
||||||
|
Once you have completed the steps to install a SSL certificate on your device, simply open a new tab to apply the changes. If this does not work, quit and restart Safari. You can now security navigate to the LAN address for your Embassy!
|
||||||
196
source/user-manuals/embassyos/general/secure-lan/desktop.rst
Normal file
@@ -0,0 +1,196 @@
|
|||||||
|
********
|
||||||
|
Desktop
|
||||||
|
********
|
||||||
|
|
||||||
|
MacOS
|
||||||
|
=====
|
||||||
|
|
||||||
|
1. Copy the Tor address from the Setup App. It is safe to message this address to yourself so that you can paste it in a browser.
|
||||||
|
|
||||||
|
2. Navigate to a :ref:`Tor enabled browser <connecting>`.
|
||||||
|
|
||||||
|
3. Your browser might display a warning screen. You can typically navigate to ``Advanced > Accept the risk and continue``.
|
||||||
|
|
||||||
|
4. Allow the page to load with your Tor address over HTTP. Using HTTPS is less performant and unnecessary because Tor v3 is self authenticating.
|
||||||
|
|
||||||
|
5. Login to Ambassador UI with the master password you created in the Setup App.
|
||||||
|
|
||||||
|
6. Navigate to the “Embassy” tab in the menu.
|
||||||
|
|
||||||
|
7. Find the section entitled “Secure LAN Setup”.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/embassy_lan_setup.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Secure LAN setup menu item
|
||||||
|
|
||||||
|
Select the "Secure LAN Setup" menu item
|
||||||
|
|
||||||
|
8. Select the "SSL Certificate" sub menu. This will prompt a download to save the certificate file to your machine.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/secure_lan_setup_page.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Secure LAN setup page
|
||||||
|
|
||||||
|
Select the "SSL Certificate" sub menu
|
||||||
|
|
||||||
|
9. Select the option to open your key with Keychain Access. If you choose to save file, double click on it once downloaded.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/secure_lan_setup_prompt.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Secure LAN setup prompt
|
||||||
|
|
||||||
|
Open with "Keychain Access" and select "OK"
|
||||||
|
|
||||||
|
10. Enter your computer password when prompted. It will be imported into your computer’s keychain.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/macos/certificate_untrusted.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Keychain access import menu
|
||||||
|
|
||||||
|
Keychain access import menu
|
||||||
|
|
||||||
|
If the keychain console did not open, press ``Command + spacebar`` and type “Keychain Access”, and hit enter to open it.
|
||||||
|
|
||||||
|
11. Navigate to the “System” tab and find the certificate entitled “Embassy Local Root CA”.
|
||||||
|
|
||||||
|
12. Double click on this certificate. A second window will pop up.
|
||||||
|
|
||||||
|
13. Open the “Trust” dropdown and select “Always Trust” from the dropdown next to “when using this certificate”.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/macos/always_trust.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Keychain submenu
|
||||||
|
|
||||||
|
Select "Always trust" under SSL dropdown for Embassy Local CA
|
||||||
|
|
||||||
|
14. Close this window and enter your password to apply the settings.
|
||||||
|
|
||||||
|
15. The “Embassy Local Root CA” cert will now read “This certificate is marked as trusted for all users” in Keychain Access.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/macos/certificate_trusted.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Keychain menu trusted certificate
|
||||||
|
|
||||||
|
Trusted Embassy Local CA certificate
|
||||||
|
|
||||||
|
16. Navigate to your desired browser to import this certificate and follow the steps for :ref:`supported browsers <browsers>`.
|
||||||
|
|
||||||
|
Windows
|
||||||
|
=======
|
||||||
|
|
||||||
|
1. Copy the Tor address from the Setup App. It is safe to message this address to yourself so that you can paste it in a browser.
|
||||||
|
|
||||||
|
2. Navigate to a :ref:`Tor enabled browser <connecting>`.
|
||||||
|
|
||||||
|
3. Your browser might display a warning screen. You can typically navigate to ``Advanced > Accept the risk and continue``.
|
||||||
|
|
||||||
|
4. Allow the page to load with your Tor address over HTTP. Using HTTPS is less performant and unnecessary because Tor v3 is self authenticating.
|
||||||
|
|
||||||
|
5. Login to Ambassador UI with the master password you created in the Setup App.
|
||||||
|
|
||||||
|
6. Navigate to the “Embassy” tab in the menu.
|
||||||
|
|
||||||
|
7. Find the section entitled “Secure LAN Setup”.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/windows_embassy_menu.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Secure LAN setup menu item
|
||||||
|
|
||||||
|
Select the "Secure LAN Setup" menu item
|
||||||
|
|
||||||
|
8. Select the "SSL Certificate" sub menu. This will prompt a download to save the certificate file to your machine.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/windows_lan_page.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Secure LAN setup page
|
||||||
|
|
||||||
|
Select the "SSL Certificate" sub menu download icon
|
||||||
|
|
||||||
|
9. Select the option to save the ``Embassy Local CA.crt`` file.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/windows_download_cert.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Secure LAN setup prompt
|
||||||
|
|
||||||
|
"Save file" when Opening Embassy Local CA.crt
|
||||||
|
|
||||||
|
10. On your computer, right-click the “Start” menu and select “Run”.
|
||||||
|
|
||||||
|
11. Type in “mmc” and click “OK”. When prompted on the “User Account Control” window, select “Yes” to allow this program to run.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/1_windows_mmc.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Windows MMC
|
||||||
|
|
||||||
|
Access the Windows Management Console
|
||||||
|
|
||||||
|
12. When the Management Console opens, navigate to ``File > Add/Remove Snap-in``.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/2_windows_console_root.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Windows Console Root
|
||||||
|
|
||||||
|
Add Snap-in from Console Root
|
||||||
|
|
||||||
|
13. Select “Certificates” in the left side menu, then “Add”. This will open another window.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/3_windows_add_certificates.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Add Certificates
|
||||||
|
|
||||||
|
Add Certificates to selected snap-ins
|
||||||
|
|
||||||
|
14. Select “Computer account” and click “Next. Leave defaulted options on the next screen and click “Finish”.
|
||||||
|
|
||||||
|
15. When you return to the “Add or Remove Snap-ins” page, ensure “Certificates (Local Computer)” exists under “Console Root” in the “Selected snap-ins” section, then click “OK”.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/4_windows_selected_snapin.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Snap-in Selected
|
||||||
|
|
||||||
|
Certificates (Local Computer) is selected as snap-in
|
||||||
|
|
||||||
|
16. In the left hand menu of the Management Console, navigate to Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/5_windows_trusted_certificate_menu.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Certificates in Management Console
|
||||||
|
|
||||||
|
Access Certificates in Management Console
|
||||||
|
|
||||||
|
17. Right click on “Certificates”, then select ``All Tasks > Import``.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/6_windows_import_cert.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Import certificate
|
||||||
|
|
||||||
|
Select "Import" from Certificates sub-menu
|
||||||
|
|
||||||
|
18. Click “Next” on the first page of the Certificate Import Wizard, then browse to the location where you saved the downloaded certificate and click “Open”.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/7_windows_import_cert_wizard.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Import cert wizard
|
||||||
|
|
||||||
|
Add downloaded certificate int he Certificate Import Wizard
|
||||||
|
|
||||||
|
19. On the “Certificate Store” window, ensure that it says “Trusted Root Certificate Authorities” and click “Next”.
|
||||||
|
|
||||||
|
20. Select “OK” when the import is successful.
|
||||||
|
|
||||||
|
21. Verify the Embassy Local Root CA certificate is in the “Certificates” folder.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/windows/8_windows_successful_cert_install.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Successful cert install
|
||||||
|
|
||||||
|
Embassy Local Root CA imported into Certificate folder
|
||||||
|
|
||||||
|
22. You can save the settings to the console if desired or cancel.
|
||||||
|
|
||||||
|
23. Navigate to your desired browser to import this certificate and follow the steps for :ref:`supported browsers <browsers>`.
|
||||||
|
|
||||||
|
Linux
|
||||||
|
=====
|
||||||
|
|
||||||
|
Please reach out to `@ProofOfKeags <http://twitter.com/ProofOfKeags>`_ on `Telegram <https://t.me/start9_labs>`_ if you would like assistance setting up SSL Certificates in this environment.
|
||||||
41
source/user-manuals/embassyos/general/secure-lan/index.rst
Normal file
@@ -0,0 +1,41 @@
|
|||||||
|
.. _ssl-setup:
|
||||||
|
|
||||||
|
****************
|
||||||
|
Secure LAN Setup
|
||||||
|
****************
|
||||||
|
|
||||||
|
EmbassyOS has ability to securely access your Embassy over HTTPS from any browser in addition to the already secure option of communicating over Tor. This method of connecting is faster when on the same Local Area Network (LAN). This is accomplished by HTTPS using the OpenSSL protocol. Your Embassy becomes a Certificate Authority and uses its root certificate to generate a self-signed cert for you to import on your devices.
|
||||||
|
|
||||||
|
The following guides will take you through the steps to install and trust the SSL certificate generated from your Embassy.
|
||||||
|
|
||||||
|
First, determine your current version of EmbassyOS from the menu at ``Embassy > About > EmbassyOS Version``.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/embassy_version.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: EmbassyOS version view
|
||||||
|
|
||||||
|
How to view EmbassyOS version
|
||||||
|
|
||||||
|
|
||||||
|
.. warning::
|
||||||
|
For EmbassyOS versions ``<0.2.5``, please follow the setup instructions on this `blog post <https://medium.com/@start9labs/embassy-https-certificate-setup-8cd873d7075c>`_.
|
||||||
|
|
||||||
|
For EmbassyOS versions ``>=0.2.5``, continue below.
|
||||||
|
|
||||||
|
Complete the setup for your device operating system:
|
||||||
|
|
||||||
|
.. toctree::
|
||||||
|
:maxdepth: 2
|
||||||
|
|
||||||
|
desktop
|
||||||
|
mobile
|
||||||
|
|
||||||
|
Next, complete the setup for your desired browser. This guide currently covers:
|
||||||
|
|
||||||
|
.. toctree::
|
||||||
|
:maxdepth: 2
|
||||||
|
|
||||||
|
browser
|
||||||
|
|
||||||
|
.. note::
|
||||||
|
For security, Secure LAN Setup is only available over the Embassy's Tor address. Ensure you are setup with a :ref:`Tor enabled browser <connecting>`.
|
||||||
88
source/user-manuals/embassyos/general/secure-lan/mobile.rst
Normal file
@@ -0,0 +1,88 @@
|
|||||||
|
******
|
||||||
|
Mobile
|
||||||
|
******
|
||||||
|
|
||||||
|
|
||||||
|
iOS
|
||||||
|
====
|
||||||
|
|
||||||
|
1. Navigate back to the `Start9 Setup App <https://apps.apple.com/us/app/start9-setup-app/id1528125889>`_.
|
||||||
|
|
||||||
|
2. Select your claimed Embassy to view the setup results.
|
||||||
|
|
||||||
|
3. Find the "Advanced" menu item at the bottom of the Setup App screen.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/mobile/ssl_setup_app_complete.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Setup app complete
|
||||||
|
|
||||||
|
Completed Setup App screen
|
||||||
|
|
||||||
|
4. Select the "Embassy Local Root CA" menu item. Clicking this will prompt you to “Save to device”.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/mobile/ssl_setup_app_advanced.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Setup app advanced menu
|
||||||
|
|
||||||
|
Setup App advanced menu
|
||||||
|
|
||||||
|
.. note:: At this point, you may see a yellow messaging indicating you need to reclaim your Embassy to activate this feature. Proceed with the recommendation.
|
||||||
|
|
||||||
|
5. You will be directed to a page in Safari indicating next steps and that the profile has been successfully downloaded. Be sure to complete all steps in this process. These steps are also outlined below.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/mobile/ssl_certificate_install_page.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Certificate install page
|
||||||
|
|
||||||
|
Select "Allow" on the certificate install page
|
||||||
|
|
||||||
|
6. Go to Settings on your iOS device.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_general_settings.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: General settings
|
||||||
|
|
||||||
|
General settings
|
||||||
|
|
||||||
|
7. Navigate to ``General > Profile(s) > Downloaded Profile > Install``.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_profiles.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Profiles
|
||||||
|
|
||||||
|
Profiles view
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_install_profile.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Install profile
|
||||||
|
|
||||||
|
Select "Install" for Embassy Local Root CA
|
||||||
|
|
||||||
|
8. Select “yes” to any warning prompts.
|
||||||
|
|
||||||
|
9. Next, navigate to ``General > About > Certificate Trust Settings``.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_cert_trust_settings.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Certificate trust settings
|
||||||
|
|
||||||
|
Select Certificate Trust Settings (scroll all the way down)
|
||||||
|
|
||||||
|
10. Enable full trust for root certificates.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/ssl/mobile/ssl_ipad_cert_trust.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Enable full trust
|
||||||
|
|
||||||
|
Toggle to enable full trust for root certificates. "Continue" when warning prompts.
|
||||||
|
|
||||||
|
11. Test that this process worked successfully by navigating to the LAN address provided in the Setup App. You should no longer see warnings about the security of this site in your browser. We recommend using Start9’s own `Consulate browser <https://apps.apple.com/us/app/consulate/id1528124570>`_ for a faster and better experience.
|
||||||
|
|
||||||
|
|
||||||
|
Android
|
||||||
|
=======
|
||||||
|
|
||||||
|
Unfortunately, Android devices do not yet natively support mDNS, which is used to access LAN addresses on a mobile device browser. As a result, you cannot yet access your LAN address from the browser on Android. We are tracking this issue `here <https://issuetracker.google.com/issues/140786115>`_, please star it to get more attention from the development team!
|
||||||
|
|
||||||
|
We are also working on the `Consulate <https://medium.com/@start9labs/announcing-the-consulate-browser-76d94a8599cb>`_ for Android, which will enable this feature by default and allow you to bookmark your LAN address for efficient access to your Embassy over HTTPS.
|
||||||
|
In the meantime, you can access your Embassy on Android using the `Tor Browser <https://www.torproject.org/download/>`_.
|
||||||
@@ -10,14 +10,11 @@ You can view and manage your Embassy inside the ``Embassy`` tab in the main menu
|
|||||||
|
|
||||||
Embassy tab
|
Embassy tab
|
||||||
|
|
||||||
|
Features
|
||||||
|
========
|
||||||
|
|
||||||
.. toctree::
|
.. toctree::
|
||||||
:maxdepth: 2
|
:maxdepth: 2
|
||||||
|
|
||||||
embassy-config
|
general/index
|
||||||
updating
|
services/index
|
||||||
wifi
|
|
||||||
developer-options/index
|
|
||||||
power
|
|
||||||
notifications
|
|
||||||
ssl
|
|
||||||
forgot-password
|
|
||||||
21
source/user-manuals/embassyos/services/index.rst
Normal file
@@ -0,0 +1,21 @@
|
|||||||
|
********
|
||||||
|
Services
|
||||||
|
********
|
||||||
|
|
||||||
|
Services are self-hosted, open source projects made compatible for EmbassyOS. Each service is has been independently developed by members of the open source community. The Embassy enables configuration, customization and a one click install.
|
||||||
|
|
||||||
|
.. note:: Some services require configuration before starting up. You can only connect to and use a service once it is in a *running* state.
|
||||||
|
|
||||||
|
Features
|
||||||
|
========
|
||||||
|
|
||||||
|
.. toctree::
|
||||||
|
:maxdepth: 2
|
||||||
|
|
||||||
|
installing
|
||||||
|
instructions
|
||||||
|
backups
|
||||||
|
service-config
|
||||||
|
properties
|
||||||
|
logs
|
||||||
|
managing-deps
|
||||||
19
source/user-manuals/embassyos/services/instructions.rst
Normal file
@@ -0,0 +1,19 @@
|
|||||||
|
************
|
||||||
|
Instructions
|
||||||
|
************
|
||||||
|
|
||||||
|
To view the instructions for a particular service, navigate to ``Services > [Service Name] > Instructions``.
|
||||||
|
|
||||||
|
.. figure:: /_static/images/bitcoin_instructions.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Bitcoin instructions menu item
|
||||||
|
|
||||||
|
Instructions menu item
|
||||||
|
|
||||||
|
.. figure:: /_static/images/bitcoin_instructions_view.png
|
||||||
|
:width: 90%
|
||||||
|
:alt: Bitcoin instructions view
|
||||||
|
|
||||||
|
Instructions view
|
||||||
|
|
||||||
|
.. note:: For advanced instructions and integration guides, visit the wrapper repository for an :ref:`available service <available-services>`.
|
||||||
@@ -1,7 +0,0 @@
|
|||||||
.. _ssl-setup:
|
|
||||||
|
|
||||||
*********
|
|
||||||
SSL Setup
|
|
||||||
*********
|
|
||||||
|
|
||||||
Please follow the setup instructions `here <https://medium.com/@start9labs/embassy-https-certificate-setup-8cd873d7075c>`_.
|
|
||||||
@@ -1,26 +0,0 @@
|
|||||||
********
|
|
||||||
Services
|
|
||||||
********
|
|
||||||
|
|
||||||
To view the instructions for a particular service, navigating to ``Services > [Service Name] > Instructions``
|
|
||||||
|
|
||||||
.. note:: Some services require configuration before starting up. You can only connect to and use a service once it is in a *running* state.
|
|
||||||
|
|
||||||
|
|
||||||
`Bitcoin <https://github.com/Start9Labs/bitcoind-wrapper/blob/master/docs/instructions.md>`_
|
|
||||||
|
|
||||||
`Bitwarden <https://github.com/Start9Labs/filebrowser-wrapper/blob/master/docs/instructions.md>`_
|
|
||||||
|
|
||||||
`Cups <https://github.com/Start9Labs/cups-wrapper/blob/master/docs/instructions.md>`_
|
|
||||||
|
|
||||||
`File Browser <https://github.com/Start9Labs/filebrowser-wrapper/blob/master/docs/instructions.md>`_
|
|
||||||
|
|
||||||
.. toctree::
|
|
||||||
:maxdepth: 2
|
|
||||||
|
|
||||||
installing
|
|
||||||
backups
|
|
||||||
service-config
|
|
||||||
properties
|
|
||||||
logs
|
|
||||||
managing-deps
|
|
||||||