diff --git a/_src/index.md b/_src/index.md
index 5242356..de258ec 100644
--- a/_src/index.md
+++ b/_src/index.md
@@ -5,7 +5,7 @@ layout: base.njk
 
 # {{title}}
 
-**GF4** is a virtual hackerspace and computer club.   We are a collective of freethinkers, sharing information, computational resources, and hosted services on a private network.  
+**GF4** is a virtual hackerspace and computer club.   We are a collective of freethinkers who share information, computational resources, and hosted services on a private network.  
 
 GF4 is, and always will be, private and invite-only.  If you are a member and have set up wireguard, you can [enter the private portal](https://www.ksn.gf4/).  
 
@@ -83,4 +83,4 @@ Subject: $NEW_USERNAME
 $YOUR_PUBLIC_KEY
 -----END PGP PUBLIC KEY BLOCK-----' | toHex | fold(93) }}
 
--->
\ No newline at end of file
+-->
diff --git a/_src/nebuchadnezzar/ca.md b/_src/nebuchadnezzar/ca.md
index d3f2917..bc6aa89 100644
--- a/_src/nebuchadnezzar/ca.md
+++ b/_src/nebuchadnezzar/ca.md
@@ -33,7 +33,14 @@ When you import a CA certificate, your platform may display very serious warning
 
 For all of these instructions, you'll need to download the certificate from [https://www.gf4.pw/ca.crt](https://www.gf4.pw/ca.crt).  
 
-### Linux
+### Fedora/Arch Linux (or p11-kit)
+
+[https://wiki.archlinux.org/title/User:Grawity/Adding_a_trusted_CA_certificate](https://wiki.archlinux.org/title/User:Grawity/Adding_a_trusted_CA_certificate)
+
+```
+curl -s https://www.gf4.pw/ca.crt \
+| trust anchor --store ca.crt
+```
 
 ### Debian/Ubuntu
 
@@ -56,7 +63,11 @@ Help wanted
 
 ### iPhone
 
-Help wanted
+1. Open [https://www.gf4.pw/ca.crt](https://www.gf4.pw/ca.crt) in Safari.
+2. Safari will say "*This website is trying to download a configuration profile. Do you want to allow this?*". Tap **Allow**.
+3. Safari will then say "*Review the profile in Settings app if you want to install it.*". Tap **Close**.
+4. Settings -> General -> **VPN & Device Management** -> **gf4** -> **Install**. If you get a warning that complains about this being an *Unmanaged Root Certificate* and *Unverified Profile*, tap **Install** again. You will notice that **Not Verified** in red will turn into **Verified** in green.
+5. Settings -> General -> About -> Certificate Trust Settings -> **Enable Full Trust For Root Certificates** -> **gf4**.
 
 ### Windows