From 32503424e8f0d03dcd6236a58a0e878a8a3c0720 Mon Sep 17 00:00:00 2001 From: Aaron Date: Sat, 13 Dec 2025 13:54:10 -0500 Subject: [PATCH] Onboarding: explain HTTPS, allow HTTP CA download --- pikit-web/onboarding/index.html | 24 ++++++++++++++++++++---- 1 file changed, 20 insertions(+), 4 deletions(-) diff --git a/pikit-web/onboarding/index.html b/pikit-web/onboarding/index.html index ea16ff9..589f43c 100644 --- a/pikit-web/onboarding/index.html +++ b/pikit-web/onboarding/index.html @@ -4,7 +4,7 @@ Welcome to your Pi-Kit - +
@@ -27,7 +27,23 @@
- Download Pi-Kit CA + + Download Pi-Kit CA + +
+ +
+

Why switch to HTTPS?

+
    +
  • Encrypts traffic on your LAN so no one can snoop your Pi-Kit or DietPi dashboards.
    • +
  • Stops mixed-content / “not secure” browser warnings.
    • +
  • Needed for some browser features (clipboard, notifications, service workers).
    • +
@@ -44,12 +60,12 @@

This removes future warnings for both Pi-Kit and DietPi dashboards.

Linux (Arch/Endeavour) - curl -s https://pikit.local/assets/pikit-ca.crt -o /tmp/pikit-ca.crt && sudo install -m644 /tmp/pikit-ca.crt /etc/ca-certificates/trust-source/anchors/ && sudo trust extract-compat + curl -s http://pikit.local/assets/pikit-ca.crt -o /tmp/pikit-ca.crt && sudo install -m644 /tmp/pikit-ca.crt /etc/ca-certificates/trust-source/anchors/ && sudo trust extract-compat
Linux (Debian/Ubuntu) - curl -s https://pikit.local/assets/pikit-ca.crt -o /tmp/pikit-ca.crt && sudo cp /tmp/pikit-ca.crt /usr/local/share/ca-certificates/pikit-ca.crt && sudo update-ca-certificates + curl -s http://pikit.local/assets/pikit-ca.crt -o /tmp/pikit-ca.crt && sudo cp /tmp/pikit-ca.crt /usr/local/share/ca-certificates/pikit-ca.crt && sudo update-ca-certificates