Sqservices 1505 doc 1 4

changelog.d/4-docs/pr-2334

@@ -0,0 +1 @@
+Documentation on how to enforce desktop application only for web app

docs/src/how-to/install/index.rst

@@ -17,7 +17,8 @@ Installing wire-server
    (production) How to monitor wire-server <monitoring.rst>
    (production) How to see centralized logs for wire-server <logging.rst>
    (production) Other configuration options <configuration-options.rst>
-   Feature settings <team-feature-settings.md>
+   Server and team feature settings <team-feature-settings.md>
+   Web app settings <web-app-settings.md>
    sft
    restund
    configure-federation

docs/src/how-to/install/team-feature-settings.md

@@ -1,4 +1,4 @@
-# Feature settings
+# Server and team feature settings
 
 Features can be enabled or disabled on a team level or server wide. Here we will only cover the server wide configuration.
 

docs/src/how-to/install/web-app-settings.md

@@ -0,0 +1,17 @@
+# Web app settings
+
+## Enforce desktop application only
+
+Wire desktop app is based on Electron and renders Wire web app in a chromium-based wrapper. At the same time Wire web app may be loaded in standard browsers like for example Chrome as well. However, this may not be desirable as under certain circumstances standard browsers may not considered a safe environment for running the Wire web app.
+
+When this flag is set to true it will prevent the web app from running in a standard browser and require the Wire desktop app for running Wire web app.
+
+To enforce desktop application only add the following to your Helm overrides in `values/wire-server/values.yaml`:
+
+```yaml
+webapp:
+  # ...
+  envVars:
+    # ...
+    FEATURE_ENABLE_ENFORCE_DESKTOP_APPLICATION_ONLY: "true"
+```