Raspberry WebKiosk FAQ

About | Download | FAQ | Changelog | References

WRITE INSTRUCTIONS

Operating system detailed write instructions have been moved here.

 

OPERATING SYSTEM

SSH LOGIN (donors’ version)

See the same question in the Raspberry Digital Signage FAQ page.

CHANGE CONNECTION METHOD

See the same question in the Raspberry Digital Signage FAQ page.

The network admin interface does not allow you to directly connect to a hidden Wi-Fi network (it only features basic connections), so in that case just connect to a non-hidden network and then modify the network config file in the /iwk folder via SSH as root as you need.

BROWSING WHITELIST/BLACKLIST

In order to add an internal filtering HTTP proxy with a whitelist behaviour, use follow the steps.

1. Install tinyproxy via apt-get and change its config file to include:

FilterURLs On
FilterDefaultDeny Yes
Filter "/etc/tinyproxy/whitelist"

2. Create a whitelist with only the domains that you want the user to see.
3. Change the default error page at /usr/share/tinyproxy/default.html to do a 0 second redirect to http://127.0.0.1/home.php, for example with JavaScript (document.location.href = “http://127.0.0.1/home.php”).
4. Set localhost:8888 as the proxy server in the admin interface.
5. Hint: when displaying your website(s), make sure no resource loading is blocked by the whitelist; use the Chromium’s developer console for the purpose.

Many thanks to Louis DeRobertis.

ADJUST DATE AND TIME

See the same question in the Raspberry Digital Signage FAQ page.

CHANGE THE HOSTNAME

See the same question in the Raspberry Digital Signage FAQ page.

1920 x 1080p

See the same question in the Raspberry Digital Signage FAQ page.

 

SECURITY

BEST PRACTICES

  • protect the web admin interface by a password (set it in the bottom of the page) – this will also automatically change the SSH password of the pi user (who is also in the sudoers list);
  • firewall port 80 (iptables rules in /etc/rc.local) in order to allow network traffic from/to your own administration IP address only.