From 611eaf2eab2455b22636ffbb7074182daa27058d Mon Sep 17 00:00:00 2001 From: DjP-iX <133042991+DjP-iX@users.noreply.github.com> Date: Fri, 26 Apr 2024 14:41:21 -0400 Subject: [PATCH 1/7] Update ConfiguringACMEDNS.md --- .../SystemConfiguration/ConfiguringACMEDNS.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md b/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md index df27fa8193..b0644c4088 100644 --- a/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md +++ b/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md @@ -22,11 +22,13 @@ Go to **System > ACME DNS** and click **ADD**. ![SystemACMEDNSAdd](/images/CORE/System/SystemACMEDNSAdd.png "ACME DNS Add") -Name the authenticator, choose a DNS provider, and configure any required **Authenticator Attributes**: +Name the authenticator. +Leave **Authenticator** set to **Route53**. +Enter the **Access ID Key** and **Secret Access Key** from Amazon. {{< hint type=note >}} -The Route 53 Amazon DNS web service requires entering an Amazon account **Access ID Key** and **Secret Access Key**. -See the [AWS documentation](https://aws.amazon.com/premiumsupport/knowledge-center/create-access-key/) for more details about generating these keys. +Amazon Route 53 is the only supported DNS provider in TrueNAS CORE. +See the [AWS documentation](https://aws.amazon.com/premiumsupport/knowledge-center/create-access-key/) for more details about generating the **Access ID Key** and **Secret Access Key**. {{< /hint >}} Click **SUBMIT** to register the DNS Authenticator and add it to the authenticator options for ACME Certificates. From a6a9a167a5ccd49d40d69bed4defd039fa1cf74e Mon Sep 17 00:00:00 2001 From: DjP-iX <133042991+DjP-iX@users.noreply.github.com> Date: Fri, 26 Apr 2024 14:41:23 -0400 Subject: [PATCH 2/7] Update ACMEDNS.md --- content/UIReference/System/ACMEDNS.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/UIReference/System/ACMEDNS.md b/content/UIReference/System/ACMEDNS.md index 3cb8a27c58..272825a002 100644 --- a/content/UIReference/System/ACMEDNS.md +++ b/content/UIReference/System/ACMEDNS.md @@ -15,7 +15,7 @@ tags: | Name | Description | |------|-------------| | **Name**| Internal identifier for the authenticator. | -| **Authenticator** | Choose a DNS provider and configure any required authenticator attributes. | +| **Authenticator** | DNS provider for the authenticator. Amazon Route 53 is the only supported DNS provider in TrueNAS CORE. | | **Access ID Key** | Key generated by the Amazon Web Services account. See the [AWS Access Key documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) for instructions to generate the key. | | **Secret Access Key** | Key generated by the Amazon Web Services account. See the [AWS Access Key documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) for instructions to generate the key. | {{< /truetable >}} From 93392dc147462381c20be0077487a6140e42d149 Mon Sep 17 00:00:00 2001 From: DjP-iX <133042991+DjP-iX@users.noreply.github.com> Date: Fri, 26 Apr 2024 14:49:04 -0400 Subject: [PATCH 3/7] Update ConfiguringACMEDNS.md --- content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md b/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md index b0644c4088..e6385eaece 100644 --- a/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md +++ b/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md @@ -26,7 +26,7 @@ Name the authenticator. Leave **Authenticator** set to **Route53**. Enter the **Access ID Key** and **Secret Access Key** from Amazon. -{{< hint type=note >}} +{{< hint type=note title="Supported DNS Providers" >}} Amazon Route 53 is the only supported DNS provider in TrueNAS CORE. See the [AWS documentation](https://aws.amazon.com/premiumsupport/knowledge-center/create-access-key/) for more details about generating the **Access ID Key** and **Secret Access Key**. {{< /hint >}} From 232b90e5db355fec93e2593e0959fc0faaa87e2c Mon Sep 17 00:00:00 2001 From: Tim Moore Date: Fri, 26 Apr 2024 15:07:04 -0400 Subject: [PATCH 4/7] 13.3 spellcheck --- content/GettingStarted/SharingStorage.md | 2 +- content/UIReference/ReportingGraphs.md | 4 +- words-to-ignore.txt | 67 ++++++++++++++++++++++++ 3 files changed, 70 insertions(+), 3 deletions(-) diff --git a/content/GettingStarted/SharingStorage.md b/content/GettingStarted/SharingStorage.md index e03e7f4259..5daa4ffc72 100644 --- a/content/GettingStarted/SharingStorage.md +++ b/content/GettingStarted/SharingStorage.md @@ -39,7 +39,7 @@ Go to **Sharing > Windows Shares (SMB)** and click *ADD*. Only the *Path* and *Name* are initially required. The *Path* is the directory tree on TrueNAS that is shared using the SMB protocol. -The *Name* forms part of the "full share pathname" when SMB clients connect. +The *Name* forms part of the "full share path name" when SMB clients connect. ![SharingSMBAddBasicExample](/images/CORE/Sharing/SharingSMBAddBasicExample.png "SMB Share Example") diff --git a/content/UIReference/ReportingGraphs.md b/content/UIReference/ReportingGraphs.md index 3df1a4b241..07a4487159 100644 --- a/content/UIReference/ReportingGraphs.md +++ b/content/UIReference/ReportingGraphs.md @@ -35,7 +35,7 @@ Because reporting data is frequently written it should not be stored on the boot | **Disk** | Displays graphs for each disk in the system. | | **Memory** | Displays both the **Physical memory utilization** and **Swap utilization** graphs. | | **Network** | Displays an **Interface Traffic** graph for each interface in the system. | -| **NFS** | Displays the **NFS Stats (Operations)** and **NFS Stats (Byptes)** graphs. | +| **NFS** | Displays the **NFS Stats (Operations)** and **NFS Stats (Bytes)** graphs. | | **Partition** | Displays graphs showing disk space allocations. | | **System** | Displays both the **Processes** and **Uptime** graphs. | | **Target** | Displays graphs only for systems with iSCSI ports configured and shows the bandwidth statistics for iSCSI ports. | @@ -71,7 +71,7 @@ Use the **Devices** dropdown list to select one or all system disks for which yo | Setting | Description | |---------|-------------| | **Select All** | Displays all available graphs for any or all disks selected on the **Devices** dropdown list. | -| **Disk Temperature** | Diplays the minimum, maximum and mean temperature reading for the disk selected. | +| **Disk Temperature** | Displays the minimum, maximum and mean temperature reading for the disk selected. | | **Disk Busy** | Displays the percent the selected disk is busy. | | **Disk Latency** | Displays the disk latency in time (msec) for read, write and delete operations. | | **Disk Operations detailed** | Displays the read, write and delete operations for the selected disk. | diff --git a/words-to-ignore.txt b/words-to-ignore.txt index 7944dfd59b..e374c9ec25 100644 --- a/words-to-ignore.txt +++ b/words-to-ignore.txt @@ -1886,3 +1886,70 @@ MinIODatasetPermissions MinIOAppStorage MinIOBucketVisible MinIOAppInstalled +COREUIReference +msec +Diskgraphs +COREGettingStarted +SharingStorage +DataBackups +iSCSIShare +StoringData +CORETopMenu +Javascript +LoggingIn +VMX +vmx +ConsoleSetupMenu +bootable +VirtualMachinesJailNetworking +EFI +KillDisk +Citrix +xpt +EFI +SecureBoot +SCALEAngelfish +SUPERMICRO +bootable +gpg +COREHardwareGuide +OpenPGP +openpgp +edu +mit +pgp +Gpg +gnupg +cryptographically +UpdatingSoftwareforaMajorVersion +databackup +CommunityGuides +MinIOPlugin +updatingcore +corereleasenotes +COREPlexPlugin +SMBv +Esc +taskmanager +topmenu +ActiveDirectory +DirectoryServices +COREshellOptions +ChangingDefaultShell +CORERequiredFields +DirectoryServices +ActiveDirectory +RGBA +prebuilt +COREUIPreferencesIntro +TLSv +uitlsciphers +SystemSupportContactEnterprise +SystemSupportProactiveEnterprise +SLA +Reddit +CommunityForums +CreateJiraSuggestion +CreateDebugCORE +UIBugReport +COREshellOptions From 46a0374a55e1ffc2546b064ce64f8c8eef38f5bf Mon Sep 17 00:00:00 2001 From: Tim Moore Date: Fri, 26 Apr 2024 15:13:07 -0400 Subject: [PATCH 5/7] Update words-to-ignore.txt --- words-to-ignore.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/words-to-ignore.txt b/words-to-ignore.txt index e374c9ec25..5f4d466dc0 100644 --- a/words-to-ignore.txt +++ b/words-to-ignore.txt @@ -1953,3 +1953,4 @@ CreateJiraSuggestion CreateDebugCORE UIBugReport COREshellOptions +Javascript From f71d6814f002aec89ad97dee0dee8319fedb366a Mon Sep 17 00:00:00 2001 From: Tim Moore Date: Fri, 26 Apr 2024 15:39:40 -0400 Subject: [PATCH 6/7] couple investigative fixes --- content/CORETutorials/ChangingDefaultShell.md | 4 ++-- content/CoreSecurityReports/SMB1Advisory.md | 11 ++++++++--- words-to-ignore.txt | 1 + 3 files changed, 11 insertions(+), 5 deletions(-) diff --git a/content/CORETutorials/ChangingDefaultShell.md b/content/CORETutorials/ChangingDefaultShell.md index 6ab36b713a..159a5558ab 100644 --- a/content/CORETutorials/ChangingDefaultShell.md +++ b/content/CORETutorials/ChangingDefaultShell.md @@ -11,11 +11,11 @@ The default shell for an account is the environment that user accesses in a loca The default shell for a new installation is `zsh`. You can change the default shell in **Accounts > Users**. -1. Click for the root user and click **Edit**. +1. Click for the root user and click **Edit**. ![AccountsUsersEditRootShell](/images/CORE/Accounts/AccountsUsersEditRootShell.png "Shell Options") 2. Choose the desired shell from the **Shell** dropdown list and click **SAVE**. **Shell** options are: - {{< include file="archive/COREshellOptions.md" >}} + {{< include file="/static/includes/COREshellOptions.md" >}} diff --git a/content/CoreSecurityReports/SMB1Advisory.md b/content/CoreSecurityReports/SMB1Advisory.md index f3b0f67bbf..300ca719dd 100644 --- a/content/CoreSecurityReports/SMB1Advisory.md +++ b/content/CoreSecurityReports/SMB1Advisory.md @@ -6,12 +6,17 @@ weight: 10 **Do not use SMB1** -SMB1, also known as SMBv1, is an early version of the Windows SMB file-sharing protocol. [Microsoft has deprecated the SMB1 protocol for security reasons and strongly recommends removing SMB1](https://support.microsoft.com/en-us/help/4034314/smbv1-is-not-installed-by-default-in-windows). SMB1 is disabled by default in FreeNAS and TrueNAS. Current SMB networking clients use later versions of the SMB protocol. +SMB1, also known as SMBv1, is an early version of the Windows SMB file-sharing protocol. [Microsoft has deprecated the SMB1 protocol for security reasons and strongly recommends removing SMB1](https://support.microsoft.com/en-us/help/4034314/smbv1-is-not-installed-by-default-in-windows). +SMB1 is disabled by default in FreeNAS and TrueNAS. +Current SMB networking clients use later versions of the SMB protocol. Microsoft maintains a list of [older products that still require SMB1](https://blogs.technet.microsoft.com/filecab/2017/06/01/smb1-product-clearinghouse/). -Windows Explorer (File Explorer) does not need SMB1, or a separate protocol called NetBIOS (sometimes called "NetBIOS over TCP/IP"), to discover and list SMB shares from a TrueNAS server. All modern versions of Windows use a newer protocol called WS-Discovery, which is more reliable and faster. TrueNAS automatically enables WS-Discovery to allow discovery of SMB shares by client devices. +Windows Explorer (File Explorer) does not need SMB1, or a separate protocol called NetBIOS (sometimes called "NetBIOS over TCP/IP"), to discover and list SMB shares from a TrueNAS server. +All modern versions of Windows use a newer protocol called WS-Discovery, which is more reliable and faster. +TrueNAS automatically enables WS-Discovery to allow discovery of SMB shares by client devices. -**Do not enable SMB1 on FreeNAS or TrueNAS without understanding the security implications and taking measures to protect the network from those risks.** Contact the vendor of older products for upgrades to support newer, more secure versions of SMB, or replace older products with ones that do not require the security risks of SMB1. +**Do not enable SMB1 on FreeNAS or TrueNAS without understanding the security implications and taking measures to protect the network from those risks.** +Contact the vendor of older products for upgrades to support newer, more secure versions of SMB, or replace older products with ones that do not require the security risks of SMB1. **Do not enable SMB1** unless it is absolutely required for essential equipment that cannot be upgraded or replaced, the security implications are understood, and steps have been taken to protect the network from those security risks. diff --git a/words-to-ignore.txt b/words-to-ignore.txt index 5f4d466dc0..b5d463b15d 100644 --- a/words-to-ignore.txt +++ b/words-to-ignore.txt @@ -1954,3 +1954,4 @@ CreateDebugCORE UIBugReport COREshellOptions Javascript +javascript \ No newline at end of file From 322c67e6bfee6db076aaa4791c4a6e708ef3bd37 Mon Sep 17 00:00:00 2001 From: MicJ <92740932+micjohnson777@users.noreply.github.com> Date: Wed, 1 May 2024 09:11:48 -0400 Subject: [PATCH 7/7] Update words-to-ignore.txt add JavaScript to words-to-ignore.txt --- words-to-ignore.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/words-to-ignore.txt b/words-to-ignore.txt index b5d463b15d..facf35829b 100644 --- a/words-to-ignore.txt +++ b/words-to-ignore.txt @@ -1954,4 +1954,5 @@ CreateDebugCORE UIBugReport COREshellOptions Javascript -javascript \ No newline at end of file +javascript +JavaScript