8 files changed, 53 insertions, 30 deletions
diff --git a/minikrebs/doc/QUICKSTART b/minikrebs/doc/QUICKSTART
new file mode 100644
index 00000000..de2c7362
--- /dev/null
+++ b/minikrebs/doc/QUICKSTART
@@ -0,0 +1,34 @@
+# Quickstart to get your own own krebs on wr703n
+
+!important this is pseudo code, so please use your brains
+
+    cd /krebs/minikrebs
+    ./prepare krebs
+    builder/init
+
+# Stock image
+connect to krebs
+
+    dhclient eth0
+    firefox 192.168.1.1
+    {{goto the firmware-upgrade page}}
+    {{upload ../builder/bin/ar71xx/openwrt-ar71xx-generic-tl-wr703n-v1-squashfs-factory.bin}}
+    {{wait}}
+    {{reconnect power}}
+
+# Upgrade image
+
+    {{ start krebs in recovery mode}}
+    ifconfig eth0 192.168.1.3
+    sysctl net.ipv4.ip_forward=1
+    iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE #assuming wlan0 provides internet access
+    telnet 192.168.1.1
+        mount_root
+        passwd
+        /etc/init.d/dropbear start
+        exit
+    OWN_IP=192.168.1.3 ./upgrade 192.168.1.1
+    {{reconnect power}}
+
+    ifconfig eth0 192.168.0.1 && dnsmasq -d
+    
diff --git a/minikrebs/profiles/rickroller/custom_make b/minikrebs/profiles/rickroller/custom_make
index c22348b1..25df33c1 100755
--- a/minikrebs/profiles/rickroller/custom_make
+++ b/minikrebs/profiles/rickroller/custom_make
@@ -1,5 +1,5 @@
 #!/bin/sh
 
 #HTTPD="mini-httpd"
-HTTPD="uhttpd"
+HTTPD="uhttpd uhttpd-mod-tls"
 make image PROFILE=TLWR703 PACKAGES="$HTTPD dnsmasq wireless-tools -radvd -kmod-ppp -kmod-pppoe -kmod-pppox -ppp -ppp-mod-pppoe" FILES=customfiles/
diff --git a/minikrebs/profiles/rickroller/customfiles/etc/config/dhcp b/minikrebs/profiles/rickroller/customfiles/etc/config/dhcp
index b058f08f..79d7bea5 100644
--- a/minikrebs/profiles/rickroller/customfiles/etc/config/dhcp
+++ b/minikrebs/profiles/rickroller/customfiles/etc/config/dhcp
@@ -9,8 +9,8 @@ config dnsmasq
 rvices
     #list rebind_domain example.lan  # whitelist RFC1918 responses for 
 domains
-    option local    '/lan/'
-    option domain   'lan'
+    #option local    '/lan/'
+    #option domain   'lan'
     option expandhosts  1
     option nonegcache   0
     option authoritative    1
@@ -23,3 +23,6 @@ config dhcp wlan
     option start    100
     option limit    150
     option leasetime    12h
+config 'domain'
+    option name         '#'
+    option ip           '192.168.23.1'
diff --git a/minikrebs/profiles/rickroller/customfiles/etc/config/firewall b/minikrebs/profiles/rickroller/customfiles/etc/config/firewall
index 6e95b5cd..56f20aa7 100644
--- a/minikrebs/profiles/rickroller/customfiles/etc/config/firewall
+++ b/minikrebs/profiles/rickroller/customfiles/etc/config/firewall
@@ -93,18 +93,20 @@ config rule
     option family       ipv6
     option target       ACCEPT
     
-# does not seem to work for some reason:    
-#config redirect
-#    option src      lan
-#    option proto        tcp
-#    option src_dport    80
-#    option dest_port    80
-
 config redirect
-    option src      lan
+    option src          lan
     option proto        tcp
     option src_dport    80
-    option src_ip           !192.168.23.1
+    option src_ip       !192.168.23.1
     option dest_port    80
     option dest_ip      192.168.23.1
     option target       DNAT
+
+config redirect
+    option src          lan
+    option proto        tcp
+    option src_dport    443 
+    option src_ip       !192.168.23.1
+    option dest_port    443
+    option dest_ip      192.168.23.1
+    option target       DNAT
diff --git a/minikrebs/profiles/rickroller/customfiles/etc/config/system b/minikrebs/profiles/rickroller/customfiles/etc/config/system
index 55aeb7aa..ffbe1530 100644
--- a/minikrebs/profiles/rickroller/customfiles/etc/config/system
+++ b/minikrebs/profiles/rickroller/customfiles/etc/config/system
@@ -3,9 +3,6 @@ config system
         option timezone UTC
 
 config 'led' 'lan_led' 
-    option 'name' 'LAN' 
+    option 'name' 'blue-led' 
     option 'sysfs' 'tp-link:blue:system' 
-    option 'trigger' 'netdev' 
-    option 'dev' 'eth0' 
-    option 'mode' 'link tx rx'
-
+    option 'trigger' 'default-on' 
diff --git a/minikrebs/profiles/rickroller/customfiles/etc/config/uhttpd b/minikrebs/profiles/rickroller/customfiles/etc/config/uhttpd
index 0767269b..74695b7c 100644
--- a/minikrebs/profiles/rickroller/customfiles/etc/config/uhttpd
+++ b/minikrebs/profiles/rickroller/customfiles/etc/config/uhttpd
@@ -11,16 +11,3 @@ config uhttpd main
     option network_timeout  30
     option tcp_keepalive    1
     option error_page   /index.html
-
-# Certificate defaults for px5g key generator
-config cert px5g
-
-    option days     730
-
-    option bits     1024
-
-    option country      DE
-    option state        shackspace
-    option location     shackspace
-
-    option commonname   krebs-rickroller
diff --git a/minikrebs/profiles/rickroller/customfiles/etc/uhttpd.crt b/minikrebs/profiles/rickroller/customfiles/etc/uhttpd.crt
new file mode 100644
index 00000000..d406c90f
--- /dev/null
+++ b/minikrebs/profiles/rickroller/customfiles/etc/uhttpd.crt
diff --git a/minikrebs/profiles/rickroller/customfiles/etc/uhttpd.key b/minikrebs/profiles/rickroller/customfiles/etc/uhttpd.key
new file mode 100644
index 00000000..d5d163d2
--- /dev/null
+++ b/minikrebs/profiles/rickroller/customfiles/etc/uhttpd.key