jack/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/roles/services/templates
History
jack 0496e9ab61
Some checks failed
CI/CD / syntax-check (push) Successful in 43s
Details
CI/CD / deploy (push) Failing after 48s
Details
feat: wildcard TLS certificate *.csrx.ru via Cloudflare DNS-01 
Add tls.stores.default.defaultGeneratedCert in dynamic config:
- Traefik requests one *.csrx.ru + csrx.ru SAN cert via DNS-01
- All existing and future subdomains use this single cert
- No per-service cert issuance wait when adding new services
- Cert auto-renewed by Traefik ~30 days before expiry

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-22 04:13:42 +07:00
..
authelia feat: comprehensive security hardening 2026-03-22 03:44:54 +07:00
crowdsec feat: comprehensive security hardening 2026-03-22 03:44:54 +07:00
grafana/provisioning feat: major infrastructure improvements 2026-03-22 03:28:16 +07:00
logrotate feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl 2026-03-22 04:06:46 +07:00
loki feat: major infrastructure improvements 2026-03-22 03:28:16 +07:00
prometheus fix: correct invalid PromQL in ContainerHighMemory alert rule 2026-03-22 03:59:56 +07:00
traefik feat: wildcard TLS certificate *.csrx.ru via Cloudflare DNS-01 2026-03-22 04:13:42 +07:00
act_runner_config.yaml.j2 Fix CI workflow: remove container directive, use runner image directly 2026-03-21 22:34:56 +07:00
docker-compose.yml.j2 feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl 2026-03-22 04:06:46 +07:00
env.j2 feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl 2026-03-22 04:06:46 +07:00