Merge pull request #633 from Start9Labs/update/seqouia

Update/sequoia

site/source/device-guides/mac/ca-mac.rst

@@ -51,4 +51,18 @@ Complete this guide to trust your server's Root Certificate Authority (Root CA)
 
     .. tip:: If the keychain console did not show the certificate as trusted, press "Command + spacebar" and type “Keychain Access”, and hit enter to re-open it.
 
-#. If using Firefox or TorBrowser, complete :ref:`this final step <ca-ff>`
+#. From macOS Sequoia (15) onwards, you'll need to allow your preferred browser to find devices on local networks.
+
+    - When you first use software on your Mac that wants to access the local network (either after you upgrade to Sequoia or whenever you run new software you have just installed) you'll be asked whether to allow local network access. Click **Allow**.
+
+        .. figure:: /_static/images/ssl/macos/sequoia-local-access.png
+            :width: 20%
+            :alt: Sequoia LAN access
+
+    - If you denied access at some point in the past and no longer have this option pop up for you, go to **Settings** then **Privacy & Security** then **Local Network** and finally toggle on the browser(s) you want to use.
+
+        .. figure:: /_static/images/ssl/macos/sequoia-local-access-settings.png
+            :width: 60%
+            :alt: Sequoia LAN access
+
+#. If using Firefox or Tor Browser, complete :ref:`this final step <ca-ff>`.

site/source/flashing-guides/index.rst

@@ -18,6 +18,7 @@ Download the latest version of StartOS to flash to a USB thumb drive (x86) or to
 
     os-pi
     os-x86
+
 ____________
 
 Firmware only

site/source/flashing-guides/os-x86.rst

@@ -13,15 +13,15 @@ Visit the `Github release page <https://github.com/Start9Labs/start-os/releases/
 
 At the bottom of the page, under "Assets," download the ``x86_64.iso`` or ``x86_64-nonfree.iso`` file.
 
--------------------------
+---------------------------
 Server Pure (*x86_64.iso*)
--------------------------
+---------------------------
 
 The ``x86_64.iso`` image contains no proprietary software and is built especially for the Server Pure.
 
--------------------------------
+----------------------------------
 Server One (*x86_64-nonfree.iso*)
--------------------------------
+----------------------------------
 
 The ``x86_64-nonfree.iso`` image contains non-free (closed-source) software. This is needed for the Server One and most DIY hardware, especially for graphics and/or network device support. 
 

site/source/support/common-issues.rst

@@ -26,8 +26,12 @@ During initial setup, I am unable to connect to "start.local".
 #. Confirm you are `not` using the Tor Browser.
 #. Confirm your phone/computer is not using a VPN, or that if you are, that it allows LAN connections, such as the examples below:
 
-    - Mullvad - Go to "Settings -> VPN Settings -> Local Network Sharing"
+    - Mullvad - Go to Settings -> VPN Settings -> Local Network Sharing
-    - ProtonVPN - Go to "Preferences -> Connection -> Allow LAN Connections"
+    - ProtonVPN - Go to Preferences -> Connection -> Allow LAN Connections
+
+#. On macOS, confirm your browser is allowed to access local network devices at:
+
+    - Settings -> Privacy & Security -> Local Network
 
 #. To avoid networking issues, it is recommended to use your `primary` router, not an extender or mesh router
 #. Very rarely, your firewall settings may block mDNS. In this case:
@@ -50,6 +54,7 @@ I am unable to reach my server via its *<custom-address>.local* (LAN) address
 
 #. Make sure you have successfully followed the :ref:`connecting-lan` instructions for your device.
 #. If you are using Windows, the problem is almost certainly with Bonjour. Follow the :ref:`directions to reinstall <connecting-lan-windows>`, even if you have already done so.
+#. If you are using macOS, confirm your browser is allowed to access local network devices at: Settings --> Privacy & Security --> Local Network
 #. If using Firefox from Mac, Windows or Android, ensure you have set ``security.enterprise_roots.enable`` to ``true`` in ``about:config`` per the :ref:`instructions<ca-ff>`
 #. Try connecting using your server's IP address or Tor address. If this works, it means your issue is specific to .local. Try clearing your browser cache and/or restarting your phone/laptop/router. If all fails, try restarting your server.
 #. Try connecting using a different browser on the same device. If this works, it means you need to clear cache on your current browser.