Verified Commit 4d3d2cf4 authored by Lukas Jelinek's avatar Lukas Jelinek 📢
Browse files

treewide: Remove garbage white spaces

parent 041a7330
Pipeline #88476 passed with stages
in 2 minutes and 43 seconds
......@@ -54,7 +54,7 @@ types: `dynfw/list` and `dynfw/delta`. As a protocol,
[ZeroMQ](https://zeromq.org/) is used with
[PUB/SUB](http://zguide2.zeromq.org/page:all#Getting-the-Message-Out) pattern
and messages are standard ZeroMQ multipart message. The first frame is the
topic – aka message type – as simple string so PUB/SUB will work. Second frame
topic – aka message type – as simple string so PUB/SUB will work. Second frame
is message itself encoded using [message pack](https://msgpack.org/).
......
......@@ -54,7 +54,7 @@ cable is the safest test.
Our routers comes with [Knot Resolver](https://www.knot-resolver.cz) which is
validating and caching DNS resolver. Some ISPs break DNSSEC and therefor some
DNS queries will fail. If you experience troubles resolving domain names, try
DNS queries will fail. If you experience troubles resolving domain names, try
various settings in [DNS tab in Foris](foris/dns/foris-dns.md). Most notably
you can disable forwarding and rely on your router resolving everything itself,
or you can forward to some DNS resolver with **DNS over TLS** like CZ.NIC,
......
......@@ -12,7 +12,7 @@ to decide if you would like to configure it like WAN or LAN and how to manage a
connection to the internet.
Because we want to make the first setup smooth, Ethernet port will be set
to LAN at the beginning of the first setup. **You shouldn't connect your MOX
to LAN at the beginning of the first setup. **You shouldn't connect your MOX
directly to the internet**. Configure it somewhere in safe environment – like
your local network or directly connected to your computer. Later on, you can
change the purpose of your only Ethernet port.
......
......@@ -42,7 +42,7 @@ As Turris Shield is trying to be as simple as possible without compromising the
security, it will not allow you to access the Internet without setting up the
password. That is the only mandatory step in the initial Guide.
### Step one — password settings
### Step one — password settings
![Setting password](shield-pass.png)
......@@ -50,7 +50,7 @@ As mentioned previously, you are asked to enter password that will protect your
administration interface. Pick something that is not easy to guess and long
enough.
#### Step one A — Insecure password used
#### Step one A — Insecure password used
![Invalid password](shield-pass-invalid.png)
......
......@@ -49,7 +49,7 @@ DNS communicaton in secret you can use DoT/TLS instead.
[Cloudflare](https://en.wikipedia.org/wiki/Cloudflare) is a world-wide cloud service provider which has its servers
in many countries. Quad9 is a non-profit organization dedicated to secure DNS services and it also has servers in
many countries. You can also use [Google](https://en.wikipedia.org/wiki/Google_Public_DNS)'s notoriosly known
public DNS servers (but currently not with DoT).
public DNS servers (but currently not with DoT).
*DNS over TLS keeps DNS traffic in secret but is a bit slower than the standard DNS communication.*
......@@ -64,12 +64,12 @@ public DNS servers (but currently not with DoT).
Disabling DNSSEC is highly discouraged. It should be done only temporarily in these cases:
1. Your ISP's DNS servers are broken and you can't use any other forwarding options nor to disable forwarding
at all (typically your ISP blocks the ports used for DNS and DoT communication with "foreign" servers).
In such case request your ISP to fix its DNS servers or consider to migrate to another ISP.
at all (typically your ISP blocks the ports used for DNS and DoT communication with "foreign" servers).
In such case request your ISP to fix its DNS servers or consider to migrate to another ISP.
2. You experience strange behavior where you browse the web or use other Internet services and you suspect it may
be caused by broken DNSSEC. If disabling DNSSEC fix these problems it converts to (1). Otherwise you should
reenable DNSSEC and investigate elsewhere.
be caused by broken DNSSEC. If disabling DNSSEC fix these problems it converts to (1). Otherwise you should
reenable DNSSEC and investigate elsewhere.
![Disable DNSSEC](disable-dnssec.png)
......@@ -85,7 +85,7 @@ resolve IP addresses for local host names. It can be useful if computers provide
When a computer requests its IP address via DHCP it sends its host name (this is the name you can see at the _LAN_
page in the _DHCP clients_ list). Remember each computer in your LAN must have an unique name to work properly.
Ambiguous names will lead to unpredictable results.
Ambiguous names will lead to unpredictable results.
## Connection test
......@@ -97,5 +97,5 @@ What particular results mean:
* _DNS_ – your router can successfully execute DNS queries and get responses
* _DNSSEC_ – your router can successfully execute DNSSEC queries and get correct (trustfully signed and intact)
responses
responses
......@@ -13,7 +13,7 @@ this warning.
## What does this warning mean?
In order to safely configure your router, you need a secure channel. If you
In order to safely configure your router, you need a secure channel. If you
don't want to use just your ethernet cable to connect to your router, **a safe
way is to use HTTPS**. Why is HTTPS safe? For one, HTTPS requires a **trusted
certificate** and if the certificate is not trusted, then warnings are
......
......@@ -44,7 +44,7 @@ default option. The DHCP server has three parameters:
* _DHCP start_ – the first address inside the address space which may be leased (assigned) via DHCP. For example,
if it is 100 and your network is 192.168.2.0 your DHCP leases addresses beginning 192.168.2.100. The default
value 100 usually need not to be changed.
value 100 usually need not to be changed.
* _DHCP max leases_ – the maximum addresses to be leased to computers. It effectively means if you have this
value set to 150 (the default) and the first leased address is 192.168.2.100 the last one is 192.168.2.249.
* _Lease time (hours)_ – this is how long an address is leased to a computer (the default is 12 hours and
......@@ -54,7 +54,7 @@ default option. The DHCP server has three parameters:
![DHCP server settings](dhcp-server.png)
### List of DHCP clients
### List of DHCP clients
The LAN section in Foris contains also the list of the current DHCP clients. It can be very useful for LAN
administration and for tuning the DHCP server settings. You can see here which computers have leased which IP addresses,
......
......@@ -18,7 +18,7 @@ and lengthen the lifespan of the internal eMMC flash storage. The `/srv` directo
site-specific data as defined in the [FHS specification](https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard).
The storage plugin can't move other parts of the file system. But it doesn't matter because all data-intensive
applications save their data into `/srv`.
## First setup
Pick an external storage device, which you want to move your persistent data to. This can be for example a simple USB
......@@ -35,7 +35,7 @@ data should be stored and press the _Format & Set_ button.
![Storage devices](devices.png)
You will be asked if you are ready to continue. If you are ready, press _OK_. Now, for applying the changes, you need to reboot your system.
You will be asked if you are ready to continue. If you are ready, press _OK_. Now, for applying the changes, you need to reboot your system.
You can do this by going to the _Notifications_ tab and pressing _Reboot_.
......@@ -63,7 +63,7 @@ be spread across all enabled drives.
If you have more drives and want to remove/replace some of them, do so by
unchecking them in in the Web UI and hitting _Format & Set_ button. Removing
drive takes a long time as data need to be moved out of it first and
drive takes a long time as data need to be moved out of it first and
!!! tip
No additional reboot is needed to extend/shrink your storage. Actually
......
......@@ -48,7 +48,7 @@ After switching to this mode, several text fields are displayed. Write in the va
second one.
![IPv4 static configuration](ipv4-static.png)
### PPPoE configuration
In this mode, your IPv4 settings are obtained automatically. Your ISP should provide you your authentication
......@@ -84,7 +84,7 @@ into the _Custom DUID_ field.
### Static IP address
This mode of native IPv6 is similar to its equivalent in the IPv4 world. Write in the values you have acquired from
This mode of native IPv6 is similar to its equivalent in the IPv4 world. Write in the values you have acquired from
your ISP.
* _IPv6 address_ (mandatory) – it's something like 2001:db8:be13:37da::1/64 (this address includes the prefix
......@@ -95,7 +95,7 @@ your ISP.
* _DNS server 2 (IPv6)_ (optional) – see above.
![IPv6 static configuration](ipv6-static.png)
### 6to4 configuration
6to4 is a transition mechanism for migrating from IPv4 to IPv6. It allows IPv6 packets to be transmitted over an IPv4
......@@ -159,4 +159,4 @@ What particular results mean:
* _IPv6 gateway connectivity_ - your router has a working gateway IPv6 address and can access IPv6 machines on the
Internet.
This test does **NOT** include DNS checking. It can be tested on the DNS page.
This test does **NOT** include DNS checking. It can be tested on the DNS page.
......@@ -4,7 +4,7 @@ competency: intermediate
---
# Static IP addresses assignment
Static DHCP server addresses assignment is useful when it's required that devices, connected to your network, will get
Static DHCP server addresses assignment is useful when it's required that devices, connected to your network, will get
permanent IP address.
Log in to [LuCI](../luci.md), then choose _DHCP and DNS_ in top navigation menu.
......
......@@ -30,7 +30,7 @@ interfaces. For creating VLAN interface over a specific port use `lanX` interfac
but you can use also `wanX` or `ethX` for managing traffic that is not passing
throught the switch.
You can check network interfaces in the hardware documentation of Omnia[^5] and
You can check network interfaces in the hardware documentation of Omnia[^5] and
Turris 1.0/1.1[^6].
### Creating a VLAN interface in LuCI
......
......@@ -46,7 +46,7 @@ Following the success of Turris Omnia, Turris MOX was also offered on
[Indiegogo](https://www.indiegogo.com/projects/turris-mox-modular-open-source-router#/)
featuring unprecedented modularity.
It uses dual-core ARMv8 CPU Marvell Armada 3720 with 512 MB/1 GB RAM. You can
It uses dual-core ARMv8 CPU Marvell Armada 3720 with 512 MB/1 GB RAM. You can
read more about Turris MOX on the [separate page](../hw/mox/intro.md).
![Turris MOX](../hw/mox/mox.jpg)
......@@ -57,7 +57,7 @@ Single-purpose device based on hardware platform of Turris MOX targeting people
who wants to easily secure their entire home or office without having to change
their modem or router.
It uses dual-core ARMv8 CPU Marvell Armada 3720 with 512 MB RAM. You can
It uses dual-core ARMv8 CPU Marvell Armada 3720 with 512 MB RAM. You can
read more about Turris Shield on the [separate page](../hw/shield/shield.md).
![Turris Shield](../hw/shield/shield.png)
......@@ -55,7 +55,7 @@ diagnostics script.
!!! info
If you do not have installed SSH support on your PC, you will need to install
SSH client. On Linux it is usually `openssh-client` and on Windows it is
SSH client. On Linux it is usually `openssh-client` and on Windows it is
Posh-SSH` or `WinSCP`. But many of Linux distros have OpenSSH client
preinstalled and also the Windows PowerShell 2.0 has it already integrated.
......@@ -75,7 +75,7 @@ command line tool).
3. Disconnect (using `Ctrl+D`).
4. Copy the diagnostic file to your computer.
- using SCP
- using SCP
```shell
$ scp root@192.168.1.1:/tmp/diag.gz <your destination>
```
......
......@@ -32,7 +32,7 @@ You will need:
You should be using UBIFS before you can proceed.
All Turris 1.0 routers comes by default with JFFS2 and this can be checked with
the `mount` command or in the advanced administration LuCI. In Turris OS 3.10.9,
the `mount` command or in the advanced administration LuCI. In Turris OS 3.10.9,
which we released at end the of the year 2018, we automatically updated the
operating system located in the NOR. It means that if you did a Factory Reset
afterwards, you should be running at least Turris OS 3.8.5 and if you were using JFFS2
......@@ -90,7 +90,7 @@ As for now, there is disabled opt-in migration for Turris 1.x routers, however
there is a way how to switch to the latest major version.
!!! warning
By following this 5.x migration howto, you will loose your current settings
By following this 5.x migration howto, you will loose your current settings
and will have to configure everything from scratch.
If you will run one by the following commands, it will download the medkit from the
......
......@@ -30,7 +30,7 @@ be prepared automatically if you create a MR).
!!! notice
You will need special access rights to create project forks in our GitLab.
We set these rights on request to users who have already repeatedly
contributed to our projects.
contributed to our projects.
!!! tip
If you have an account on GitHub you can use it to sign into our GitLab.
......
......@@ -27,7 +27,7 @@ external storage such as an USB HDD or SSD. Read the [Storage plugin](../../basi
!!! danger
Operating LXC on the internal flash storage may lead to rapid degradation and eventually to failure of the storage.
This may void your warranty.
This may void your warranty.
## LXC packages
......@@ -55,7 +55,7 @@ You can set `image.linuxcontainers.org` as well (which provides a larger set of
LXC image repository.
* _Enable SSL_ – Check this to enable SSL support. If you use `repo.turris.cz` as your repository this must be checked.
* _Free Space Threshold_ – The minimum free disk space (in KB) for LXC container creation. If the free space falls
under this value no new container may be created. The default value (100 MB) is usually suitable.
under this value no new container may be created. The default value (100 MB) is usually suitable.
* _Free Temp Threshold_ – The minimum free temporary disk space (in KB) for LXC container creation. If the temporary
free space falls under this value no new container may be created. The default value (100 MB) is usually suitable.
......@@ -68,7 +68,7 @@ be applied immediately (and a new set of Linux distros will be downloaded).
There are only two things to do before creating a LXC container. Write its name into the _Name_ field and choose
the Linux distribution to install (from the _Template_ drop-down list). Then press the _Create_ button and
the process of the creation of a new LXC container will start. This can take a while. In LuCI you cannot see the progress and if it
the process of the creation of a new LXC container will start. This can take a while. In LuCI you cannot see the progress and if it
fails, you might not find why.
![Create New Container](create.png)
......@@ -157,7 +157,7 @@ lxc-attach -n test
```
Now you are inside the container and you can work as usually (according to the distro you have installed). To allow
direct access to the container, consider to install the SSH client package(s) and set the root password. Even better is
direct access to the container, consider to install the SSH client package(s) and set the root password. Even better is
a usage of SSH public key(s) for the authentification. After this procedure, you will be able to connect directly. The IP addresses
of the container can be obtained from the `lxc-ls` listing (see above) or by running `ip addr` inside the container
(if your distro supports it).
......@@ -174,7 +174,7 @@ Here is an example configuration file:
config container
option name my_first_container
option timeout 60
config container
option name my_second_container
option timeout 120
......
......@@ -35,7 +35,7 @@ Netdata will be installed in the same way as other packages.
In CLI via SSH you can run the following commands. The first of them will update
the list of available packages and the second one will install netdata onto
your router.
your router.
```
opkg update
......
......@@ -17,7 +17,7 @@ cloud provider with your personal data.
!!! tip "Benefits of using Nextcloud"
* An open source solution, fully under your own control.
* Synchronization and sharing of data made easy.
* Mobile, desktop and web client.
* Mobile, desktop and web client.
* Monitors changes and allows document workflow management.
* A space for your calendar and contacts.
* Safe private voice and video calls, shared screens.
......@@ -72,7 +72,7 @@ Once done, you get a link directly to your ready to use Nextcloud instance.
### Manual installation from CLI
Nextcloud is already included in our repositories, so you can get it simply by
installing the package `nextcloud-install` by issuing the following
installing the package `nextcloud-install` by issuing the following
commands:
```
......@@ -107,7 +107,7 @@ Foris](../../basics/apps/openvpn-server/openvpn.md) or you need to open up some
your firewall. Second option would allow anybody (including attackers) to try to
log in to your Nextcloud instance and – if you don't change the Lighttpd
configuration – to LuCI and Foris. Please don’t do that unless you are sure what
you are doing.
you are doing.
Also bear in mind that if you are using Nextcloud from our repositories, **you
shouldn't update the Nextcloud core manually** as that would get overwritten by
......
......@@ -88,7 +88,7 @@ the snapshot to distinguish between more types especially for later automatic pr
* `time` – snapshots created on time base (by cron)
* `pre` – snapshots created before updates
* `post` – snapshots created after updates
* `rollback` – snapshots created when rolling back (can't be created manually)
* `rollback` – snapshots created when rolling back (can't be created manually)
The full form of the command will be like:
```
......@@ -185,7 +185,7 @@ rmdir /mnt/usb
```
This set of commands does the following:
1. Creates a directory to be the mount point for the USB drive.
1. Creates a directory to be the mount point for the USB drive.
2. Mounts the /dev/sda1 device (the first partition on the USB drive) to the mount point.
3. Exports the given snapshot to the mounted file system.
4. Unmounts the target file system.
......@@ -328,6 +328,6 @@ to your Turris and use schnapps to work with snapshots on it the same way you ma
If your file system is mounted on `/mnt/disk` you can create a snapshot by this command:
```
schnapps -d /mnt/disk create
schnapps -d /mnt/disk create
```
Other commands can be used similarly.
......@@ -17,7 +17,7 @@ functions and varying stability – you can pick, which branch you want to test.
Following list describes various branches you might want to try and their main
functions. They are ordered from the most stable to the most experimental.
### HBS – _Here Be Snails (Stable)_
### HBS – _Here Be Snails (Stable)_
Default and most stable branch. Suggested for all users. This contains
official releases and is what everybody is running by default.
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment