@node Usage
@unnumbered Usage
-@itemize
+Currently @command{tofuproxy} uses:
+GnuTLS'es @url{https://www.gnutls.org/manual/html_node/certtool-Invocation.html, certtool},
+@url{http://cr.yp.to/redo.html, redo} build system,
+@url{https://www.tcl.tk/, Tcl/Tk}'s @command{wish} shell for GUI dialogues,
+@command{dwebp}, @command{djxl}, @command{avifdec} for images transcoding,
+@url{https://github.com/halturin/multitail, multitail} for logs viewing.
-@item Currently @command{tofuproxy} uses:
- GnuTLS'es @url{https://www.gnutls.org/manual/html_node/certtool-Invocation.html, certtool},
- @url{http://cr.yp.to/redo.html, redo} build system,
- @url{https://www.tcl.tk/, Tcl/Tk}'s @command{wish} shell for GUI dialogues,
- @command{dwebp}, @command{djxl} for images transcoding,
- @url{https://github.com/halturin/multitail, multitail} for logs viewing.
+@itemize
@item Download and build @command{tofuproxy}:
$ gpg --auto-key-locate dane --locate-keys stargrave at stargrave dot org
$ gpg --auto-key-locate wkd --locate-keys stargrave at gnupg dot net
$ gpg --verify cert.pem.asc
-$ SSL_CERT_FILE=cert.pem GIT_SSL_CAINFO=cert.pem redo all
+$ SSL_CERT_FILE=`pwd`/cert.pem GIT_SSL_CAINFO=`pwd`/cert.pem redo all
@end example
@item
Run @command{tofuproxy} itself. By default it will bind to
-@code{[::1]:8080}, use @code{[::1]:53} DNS server for DANE requests
+@code{[::1]:8080} and use @code{[::1]:53} DNS server for DANE requests
(set to an empty string to disable DANE lookups):
@example
-$ ./tofuproxy
-main.go:316: listening: [::1]:8080
+$ ./tofuproxy.cmd
+main.go:70: listening: [::1]:8080 dns: [::1]:53 certs: ./certs ccerts: ./ccerts
@end example
@item Trust your newly generated CA:
# cat cert.pem >> /etc/ssl/cert.pem
@end example
-@item Point you HTTP/HTTPS clients to @code{http://localhost:8080}.
+@item Point you HTTP/HTTPS clients to @code{http://localhost:8080} proxy.
@item Watch logs:
@image{logs,,,Example logs,.webp}
-@item
-When you encounter something requiring your attention and decision, you
-will be shown Tk-dialog through the @command{wish} invocation. GnuTLS'es
-@command{certtool} is used for certificate information printing.
-
-@image{dialog,,,Example dialog,.webp}
-
@end itemize