atlas
fb93cbf5c2
feat: add tls.acme mode — nginx inside container manages Let's Encrypt
per mara's suggestion: instead of bind-mounting operator certs, let
nginx handle ACME directly inside the gateway container.
- tls.acme.enable: lets nginx obtain + renew via HTTP-01 challenge
- tls.acme.email: ACME account contact (required when enable=true)
- security.acme in container config when acme.enable
- hasTls includes acme.enable → https, httpsPort listen, firewall
- mutual exclusion assertions: acme vs selfSignedTls vs certDir
- docs/gateway.md: four-mode TLS table + ACME section
typical setup:
selfSignedTls = false; openFirewall = true;
tls.acme = { enable = true; email = "admin@example.com"; };
|
2026-06-03 16:46:52 +02:00 |
| .. |
|
docs
|
chore: scrub #NNN issue references from code comments and nix descriptions
|
2026-06-01 13:30:52 +02:00 |
|
forge-theme
|
forge: use branding/hyperhive.svg for logo and favicon
|
2026-05-21 17:50:46 +02:00 |
|
modules
|
feat: add tls.acme mode — nginx inside container manages Let's Encrypt
|
2026-06-03 16:46:52 +02:00 |
|
packages
|
chore: scrub #NNN issue references from code comments and nix descriptions
|
2026-06-01 13:30:52 +02:00 |
|
templates
|
fix(#702): heal proposed-config ownership in agent-user-migrate
|
2026-06-03 00:37:55 +02:00 |
|
assets.nix
|
docs/gotchas.md: extract nix/{assets,docs,templates/weston-vnc} prose (#718 batch 3)
|
2026-05-31 15:24:39 +02:00 |
|
frontend.nix
|
frontend: npm dependency updates (#681)
|
2026-05-31 01:29:35 +02:00 |