Onboarding: explain HTTPS, allow HTTP CA download

This commit is contained in:
Aaron
2025-12-13 13:54:10 -05:00
parent 50be46df45
commit 32503424e8

View File

@@ -4,7 +4,7 @@
<meta charset="UTF-8" /> <meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>Welcome to your Pi-Kit</title> <title>Welcome to your Pi-Kit</title>
<link rel="stylesheet" href="/onboarding/style.css" /> <link rel="stylesheet" href="/onboarding/style.css?v=2" />
</head> </head>
<body> <body>
<main class="card"> <main class="card">
@@ -27,7 +27,23 @@
<section class="actions"> <section class="actions">
<button id="continueBtn">Continue to secure dashboard</button> <button id="continueBtn">Continue to secure dashboard</button>
<a class="ghost" id="downloadCa" href="/assets/pikit-ca.crt" download>Download Pi-Kit CA</a> <a
class="ghost"
id="downloadCa"
href="http://pikit.local/assets/pikit-ca.crt"
download
>
Download Pi-Kit CA
</a>
</section>
<section class="steps">
<h3>Why switch to HTTPS?</h3>
<ul>
<li>Encrypts traffic on your LAN so no one can snoop your Pi-Kit or DietPi dashboards.</li>
<li>Stops mixed-content / “not secure” browser warnings.</li>
<li>Needed for some browser features (clipboard, notifications, service workers).</li>
</ul>
</section> </section>
<section class="steps"> <section class="steps">
@@ -44,12 +60,12 @@
<p>This removes future warnings for both Pi-Kit and DietPi dashboards.</p> <p>This removes future warnings for both Pi-Kit and DietPi dashboards.</p>
<details> <details>
<summary>Linux (Arch/Endeavour)</summary> <summary>Linux (Arch/Endeavour)</summary>
<code id="archCmd">curl -s https://pikit.local/assets/pikit-ca.crt -o /tmp/pikit-ca.crt && sudo install -m644 /tmp/pikit-ca.crt /etc/ca-certificates/trust-source/anchors/ && sudo trust extract-compat</code> <code id="archCmd">curl -s http://pikit.local/assets/pikit-ca.crt -o /tmp/pikit-ca.crt && sudo install -m644 /tmp/pikit-ca.crt /etc/ca-certificates/trust-source/anchors/ && sudo trust extract-compat</code>
<button class="copy" data-target="archCmd">Copy</button> <button class="copy" data-target="archCmd">Copy</button>
</details> </details>
<details> <details>
<summary>Linux (Debian/Ubuntu)</summary> <summary>Linux (Debian/Ubuntu)</summary>
<code id="debCmd">curl -s https://pikit.local/assets/pikit-ca.crt -o /tmp/pikit-ca.crt && sudo cp /tmp/pikit-ca.crt /usr/local/share/ca-certificates/pikit-ca.crt && sudo update-ca-certificates</code> <code id="debCmd">curl -s http://pikit.local/assets/pikit-ca.crt -o /tmp/pikit-ca.crt && sudo cp /tmp/pikit-ca.crt /usr/local/share/ca-certificates/pikit-ca.crt && sudo update-ca-certificates</code>
<button class="copy" data-target="debCmd">Copy</button> <button class="copy" data-target="debCmd">Copy</button>
</details> </details>
<details> <details>