infra/roles
jack f183fe485f
Some checks failed
CI/CD / syntax-check (push) Successful in 44s
CI/CD / deploy (push) Failing after 39s
revert: switch back to HTTP-01 until Cloudflare NS propagation
DNS-01 + wildcard cert requires Cloudflare to be authoritative NS.
Until propagation completes, use httpChallenge on port 80.

Plan after Cloudflare NS is active:
1. Switch back to dnsChallenge in traefik.yml.j2
2. Re-enable tls.stores.default.defaultGeneratedCert in routes.yml.j2
3. Clear acme.json → Traefik issues *.csrx.ru wildcard cert

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-22 04:18:21 +07:00
..
backup feat: Timeweb S3 offsite backup uploads 2026-03-22 03:58:58 +07:00
base fix: allow Docker bridge networks through UFW for runner + add unattended-upgrades 2026-03-22 04:11:39 +07:00
docker feat: Cloudflare DNS-01 ACME + Docker hardening + sysctl 2026-03-22 04:06:46 +07:00
services revert: switch back to HTTP-01 until Cloudflare NS propagation 2026-03-22 04:18:21 +07:00