Add instructions for using self-signed SSL cert with mobile apps (#1181)

dockerfiles/all-in-one/Dockerfile

@@ -163,6 +163,7 @@ ENV ALIASVAULT_VERBOSITY=0 \
     IP_LOGGING_ENABLED=true \
     SUPPORT_EMAIL="" \
     PRIVATE_EMAIL_DOMAINS="" \
+    HOSTNAME=localhost \
     POSTGRES_HOST=localhost \
     POSTGRES_PORT=5432 \
     POSTGRES_USER=aliasvault \

dockerfiles/all-in-one/s6-scripts/init/script

@@ -1,4 +1,4 @@
-#!/bin/sh -e
+#!/command/with-contenv sh
 
 # AliasVault Container Initialization Script
 # This script runs once at container startup and handles all initialization tasks

dockerfiles/docker-compose.all-in-one.nas.yml

@@ -23,6 +23,7 @@ services:
       - avsecrets:/secrets
 
     environment:
+      HOSTNAME: "localhost"
       PUBLIC_REGISTRATION_ENABLED: "true"
       IP_LOGGING_ENABLED: "true"
       FORCE_HTTPS_REDIRECT: "false"

dockerfiles/docker-compose.all-in-one.yml

@@ -21,6 +21,7 @@ services:
       - ./secrets:/secrets
 
     environment:
+      HOSTNAME: "localhost"
       PUBLIC_REGISTRATION_ENABLED: "true"
       IP_LOGGING_ENABLED: "true"
       FORCE_HTTPS_REDIRECT: "false"

docs/installation/docker-compose/index.md

@@ -46,6 +46,7 @@ services:
       - ./secrets:/secrets
 
     environment:
+      HOSTNAME: "localhost"
       PUBLIC_REGISTRATION_ENABLED: "true"
       IP_LOGGING_ENABLED: "true"
       FORCE_HTTPS_REDIRECT: "false"

docs/mobile-apps/android/ssl-setup.md

@@ -0,0 +1,65 @@
+---
+layout: page
+title: Self-Signed SSL Setup
+parent: Android App
+grand_parent: Mobile Apps
+nav_order: 3
+---
+
+# Self-Signed SSL Certificate Setup for Android
+
+By default, the AliasVault Android app only supports connecting to servers with a valid SSL certificate from a trusted external authority. If you want to use your own self-signed certificate, you must manually install and trust the certificate on your Android device by following these steps.
+
+## Server Setup
+
+### Standard Installation
+Configure your hostname and restart AliasVault:
+```bash
+./install.sh configure-hostname
+./install.sh restart
+```
+
+### All-in-One Docker
+Update your `docker-compose.yml`:
+```yaml
+environment:
+  HOSTNAME: "192.168.3.2"  # Your server IP/hostname
+```
+Then restart: `docker compose down && docker compose up -d`
+
+## Step 1: Get the Certificate
+
+### Option A: From Browser
+1. Open Chrome, go to your AliasVault instance (e.g., `https://192.168.3.2`)
+2. Click the padlock icon → inspect certificate
+3. Export the certificate and send it to your phone
+
+### Option B: From Server
+Copy from your AliasVault installation directory:
+```bash
+cp [aliasvault-install-dir]/certificates/ssl/cert.pem ~/aliasvault.crt
+```
+Transfer to your Android device.
+
+## Step 2: Install Certificate (Android 10+)
+
+1. **Open Settings** → search for "Certificate"
+2. **Tap "Install a certificate"** → **"CA certificate"**
+3. **Browse to Downloads** → select your certificate file
+4. **Enter your PIN/password** when prompted
+5. **Name it "AliasVault"** and tap **OK**
+
+## Step 3: Configure AliasVault App
+
+1. **Open the AliasVault app**
+2. **Go to Settings** → **Server Configuration**
+3. **Enter your server URL**: `https://192.168.3.2/api` (use your configured hostname)
+4. **Test connection** - should work without SSL errors
+
+## Troubleshooting
+
+**Certificate not trusted**: Verify it's installed under Settings → Security → Trusted credentials → User tab
+
+**App can't connect**: Ensure the hostname in the app matches your server configuration exactly
+
+**Installation fails**: Make sure you have a screen lock set up on your device

docs/mobile-apps/ios/ssl-setup.md

@@ -0,0 +1,71 @@
+---
+layout: page
+title: Self-Signed SSL Setup
+parent: iOS App
+grand_parent: Mobile Apps
+nav_order: 3
+---
+
+# Self-Signed SSL Certificate Setup for iOS
+
+By default, the AliasVault iOS app only supports connecting to servers with a valid SSL certificate from a trusted external authority. If you want to use your own self-signed certificate, you must manually install and trust the certificate on your iOS device by following these steps.
+
+## Server Setup
+
+### Standard Installation
+Configure your hostname and restart AliasVault:
+```bash
+./install.sh configure-hostname
+./install.sh restart
+```
+
+### All-in-One Docker
+Update your `docker-compose.yml`:
+```yaml
+environment:
+  HOSTNAME: "192.168.3.2"  # Your server IP/hostname
+```
+Then restart: `docker compose down && docker compose up -d`
+
+## Step 1: Get the Certificate
+
+### Option A: From Browser
+1. Open Chrome on your computer, go to your AliasVault instance (e.g., `https://192.168.3.2`)
+2. Click the padlock icon → inspect certificate
+3. Export the certificate and send it to your device (e.g. via email)
+
+### Option B: From Server
+Copy from your AliasVault installation directory:
+```bash
+cp [aliasvault-install-dir]/certificates/ssl/cert.pem ~/aliasvault.crt
+```
+
+## Step 2: Install Certificate Profile
+
+1. Open the certificate on your iOS device
+1. **Tap "Install"** in the top right corner
+2. **Enter your passcode** when prompted
+3. **Tap "Install"** again to confirm the warning
+4. **Tap "Done"** when complete
+
+## Step 3: Enable Certificate Trust (Critical!)
+
+1. **Settings** → **General** → **About** → **Certificate Trust Settings**
+2. **Find your certificate** (listed by hostname like "192.168.3.2")
+3. **Toggle the switch to ON**
+4. **Tap "Continue"** in the warning
+
+## Step 4: Configure AliasVault App
+
+1. **Open the AliasVault app**
+2. **Go to Settings** → **Server Configuration**
+3. **Enter your server URL**: `https://192.168.3.2/api` (use your configured hostname)
+4. **Test connection** - should work without SSL errors
+
+## Troubleshooting
+
+**SSL errors**: Ensure you completed Step 3 (Certificate Trust) - this is the most commonly missed step
+
+**Certificate Trust Settings not visible**: You must install a certificate profile first
+
+**App can't connect**: Verify the hostname in the app matches your server configuration exactly