#rmnfakecloud and ios app

1 messages · Page 1 of 1 (latest)

wanton bolt
#

.

#

So i can just use the keys it made then

desert cypress
#

Context: #general message

#

rmnfakecloud and ios app

teal bane
#

If you want, doesn’t really matter how the keys / certs get generated

wanton bolt
#

Im just looking at the doc you sent

#

Saying make something for 10 domains

#

Wtf

teal bane
#

yeah rmfakecloud-proxy does that too

wanton bolt
#

Ok so

#

root@imx93-chiappa:~# ls
ca.crt installer-rmpro.sh proxy.key
ca.key proxy.bundle.crt proxy.pubkey
ca.srl proxy.crt rmfakecloud
csr.conf proxy.csr
root@imx93-chiappa:~#

teal bane
#

You’ll probably want to start with figuring out DNS on iOS otherwise everything else is pointless.

wanton bolt
#

That's what i have

#

That's easy

teal bane
#

Whatcha gonna do?

wanton bolt
#

Im sure its easy

#

Whatever it is

#

Easier than this

teal bane
#

It’s the hardest part

wanton bolt
#

Is it just a profile I install?

teal bane
#

No

#

The cert is a profile

wanton bolt
#

Do i need a computer?

#

To bake it into a profile?

teal bane
#

You can’t set DNS via a profile to my knowledge

wanton bolt
#

So it uses

#

Remakables dns server

#

Or what

desert cypress
#

reMarkable doesn't have a dns server

wanton bolt
#

So what dns is it using

#

Will this override 1.1.1.1 or something

#

I dont know what the hell kubernetes is in the doc

teal bane
#

You need your iOS device to use a DNS server you control and can serve the records you want for the rM domains

wanton bolt
#

So I need to set up a dns server

#

Couldve just said that

teal bane
#

I think I’m done here

void rose
#

It's possible to follow the principles of the guide without using Kubernetes (I did), but you need to understand the general foundations of what is happening.

#

Pi-Hole or AdGuard are good candidates.

wanton bolt
#

I have a pi hole

void rose
#

(With side benefits.)

wanton bolt
#

So literally i can just import the cert to my phone

#

And add records on pihole

teal bane
#

You’ll need the cert on nginx too

#

Or some proxy

#

That solves it while you’re on your home network, which may be good enough

wanton bolt
#

The cert should be for https on nginx?

#

Like

#

ssl_certificate /etc/letsencrypt/live/mine.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/mine.com/privkey.pem;

location / {
#

Right now thats what i have

wanton bolt
#

Anyone else