infra/roles/services
jack 0496e9ab61
Some checks failed
CI/CD / syntax-check (push) Successful in 43s
CI/CD / deploy (push) Failing after 48s
feat: wildcard TLS certificate *.csrx.ru via Cloudflare DNS-01
Add tls.stores.default.defaultGeneratedCert in dynamic config:
- Traefik requests one *.csrx.ru + csrx.ru SAN cert via DNS-01
- All existing and future subdomains use this single cert
- No per-service cert issuance wait when adding new services
- Cert auto-renewed by Traefik ~30 days before expiry

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-22 04:13:42 +07:00
..
defaults feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl 2026-03-22 04:06:46 +07:00
files/grafana/dashboards feat: add monitoring stack (Prometheus + Grafana + cAdvisor + Node Exporter) 2026-03-22 03:05:34 +07:00
handlers Initial commit 2026-03-20 19:39:26 +07:00
tasks feat: add uptime-kuma pull, logrotate deploy task, logrotate package 2026-03-22 03:54:24 +07:00
templates feat: wildcard TLS certificate *.csrx.ru via Cloudflare DNS-01 2026-03-22 04:13:42 +07:00