Commit graph

17 commits

Author SHA1 Message Date
Roland
fbb71e012d Replace nginx with Caddy for TLS termination and reverse proxying.
- Replace nginx with Caddy as the web server for both Docker and native
  (RPi/Debian) deployments. Caddy handles HTTPS termination, reverse
  proxying to all services (API, React app, Controller, Kiwix, Help, Map),
  and serves the media/download file browsers.
- Generate a Root CA and signed leaf certificates for HTTPS. The Root CA
  uses Name Constraints to restrict signing to local addresses only
  (.local, localhost, and RFC 1918 private IP ranges), mitigating MITM
  risk if the CA key is compromised.
- Add an HTTP landing page that guides users through one-time CA
  certificate installation on iOS, Android, macOS, Windows, Linux, and
  Firefox, with auto-redirect when the cert is already trusted.
- Add trailing-slash redirects for /controller, /docs, /media, and
  /download so bare paths don't fall through to the React catch-all.
- Add a Root CA download link on the Settings page under Configs.
- Update help.sh diagnostics for IPv6 listener detection and HTTP/2
  status codes.
- Remove all nginx config files and the https_proxy Docker container.
- Bump wrolpi-help submodule with certificate documentation.
2026-03-07 18:48:44 -07:00
Roland
9f395cd631
Bumping wrolpi-help to include new docs. 2026-02-23 17:30:24 -07:00
Roland
ca3589b555
Bumping WROLPi Help to include Collection docs. 2026-02-23 15:39:32 -07:00
Roland
b3e91fcff7
Adding link to help for cookies feature. Updating help with latest cookies docs. 2025-05-05 17:02:32 -06:00
Roland
506a349276
Bumping WROLPi Help version. 2025-02-04 17:55:06 -07:00
Roland
26f4d2f55d
Bumping wrolpi-help commit. 2025-01-04 10:54:28 -07:00
Roland
a068273beb
Updating wrolpi-help commit. Forcing re-install of mkdocs because of navbar bug. 2024-10-16 18:56:07 -06:00
Roland
8cf07c2ffb
Bumping Help version. 2024-10-16 18:55:40 -06:00
Roland
bd431165e5
Displaying helpful error when iframes do not load. 2024-06-17 10:40:30 -06:00
Roland
38de2f9b40
Moving HTTP kiwix/help services to 9085/9086 ports. Nginx will serve HTTPS proxy for kiwix/help services at the old ports. Modifying apache2 to use HTTPS to serve map.
Using new https_proxy docker container to serve HTTPS for zim, map and help.
2024-06-12 21:38:51 -06:00
Roland
ad8433f9f4
Bumping WROLPi Help version. 2024-05-14 20:34:22 -06:00
Roland
517cabf105
Bumping wrolpi-help version. 2024-05-08 20:08:32 -06:00
Roland
1c5b277f24
Bumping help to latest. 2024-03-10 16:55:38 -06:00
Roland
a90c37a1df
Bumping wrolpi-help commit. 2024-02-19 11:00:23 -07:00
Roland
81419b8353
Bumping help version. 2023-11-30 10:17:06 -07:00
Roland
36231de07f
Bumping help version. 2023-10-29 18:21:07 -06:00
Roland
e6d8c5ce99
Creating Help link in top navbar. Adding wrolpi-help as submodule and docker container which displays the WROLPi Help repo. 2023-10-15 17:18:33 -06:00