rt/wrolpi
1
0
Fork 0
mirror of https://github.com/lrnselfreliance/wrolpi.git synced 2026-10-26 19:01:39 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
wrolpi/debian-live-config
History
Roland fbb71e012d Replace nginx with Caddy for TLS termination and reverse proxying. 
- Replace nginx with Caddy as the web server for both Docker and native
  (RPi/Debian) deployments. Caddy handles HTTPS termination, reverse
  proxying to all services (API, React app, Controller, Kiwix, Help, Map),
  and serves the media/download file browsers.
- Generate a Root CA and signed leaf certificates for HTTPS. The Root CA
  uses Name Constraints to restrict signing to local addresses only
  (.local, localhost, and RFC 1918 private IP ranges), mitigating MITM
  risk if the CA key is compromised.
- Add an HTTP landing page that guides users through one-time CA
  certificate installation on iOS, Android, macOS, Windows, Linux, and
  Firefox, with auto-redirect when the cert is already trusted.
- Add trailing-slash redirects for /controller, /docs, /media, and
  /download so bare paths don't fall through to the React catch-all.
- Add a Root CA download link on the Settings page under Configs.
- Update help.sh diagnostics for IPv6 listener detection and HTTP/2
  status codes.
- Remove all nginx config files and the https_proxy Docker container.
- Bump wrolpi-help submodule with certificate documentation.
2026-03-07 18:48:44 -07:00
..
config Replace nginx with Caddy for TLS termination and reverse proxying. 2026-03-07 18:48:44 -07:00
build.sh Fetching latest release version when building images so they are named correctly. 2026-02-26 17:45:39 -07:00
README.md Building pi and debian images using branch by default, allowing specifying branch with -b option. 2026-02-22 15:09:15 -07:00

README.md

Debian Live Config

This directory exists to facilitate the creation of WROLPi Debian images.

See https://live-team.pages.debian.net/live-manual/html/live-manual/index.en.html

Generate Debian 12 ISO

  1. Convert a map PBF file to your initial map DB dump:
    • docker run --rm -v /home/user/district-of-columbia-230111.osm.pbf:/data/region.osm.pbf lrnselfreliance/osm-map-dumper > debian-live-config/config/includes.chroot/opt/wrolpi-blobs/map-db-gis.dump
  2. Run the build.
    • sudo ./build.sh
    • Or, build specific branch: sudo ./build.sh -b master
  3. The ISO is now in the debian-live-config directory.