TUPSAN HTRS - PHASE 4 LOCAL NETWORK SETUP
=========================================

CURRENT DEMONSTRATION ADDRESS
-----------------------------
Computer IPv4: 192.168.1.6
Subnet: 192.168.1.0/24
Application: https://192.168.1.6/tupsan/

The address is currently assigned by DHCP. Reserve 192.168.1.6 for this
computer's Wi-Fi adapter in the router at 192.168.1.1. A router reservation is
safer than forcing a Windows static address because it avoids address conflicts.


ANDROID PHONE SETUP
-------------------
1. Connect the phone to the same private Wi-Fi network as the XAMPP computer.
2. Transfer tools\phase4\Tupsan-HTRS-Local-CA.crt to the demonstration phone.
3. In Android security settings, install it as a CA certificate. Menu names vary
   by Android version; it is commonly under Security, Encryption/Credentials,
   or Install a certificate.
4. Open: https://192.168.1.6/tupsan/
5. Confirm there is no certificate warning before testing GPS.
6. Allow location permission when the browser requests it.

Install this CA only on controlled capstone demonstration devices. Remove it
after the project is finished if the device will no longer access this server.


ANOTHER WINDOWS LAPTOP
----------------------
1. Connect the laptop to the same private Wi-Fi network.
2. Import Tupsan-HTRS-Local-CA.crt into Trusted Root Certification Authorities.
3. Open: https://192.168.1.6/tupsan/


SECURITY NOTES
--------------
- Never share C:\xampp\apache\conf\tupsan-ssl\rootCA.key.
- The firewall rule permits TCP ports 80 and 443 only on Private networks and
  only from the local subnet.
- MySQL port 3306 is not opened by the Phase 4 firewall rule.
- If the computer's IPv4 address changes, run setup_local_xampp.ps1 again as
  Administrator, then reserve the new address in the router.


ROLLBACK
--------
The pre-Phase 4 Apache configuration and old certificate are stored in:
C:\xampp\htdocs\tupsan_backups\phase4_before_20260721_202045\xampp_apache

