3 Commits

Author	SHA1	Message	Date
Kevin Veen-Birkenbach	ba99e558f7	Improve SAN certbundle task logic and messages ... - Fixed typo: 'seperat' → 'separate' - Added more robust changed_when conditions (stdout + stderr, handle already-issued, rate-limit, service-down cases) - Added explicit warnings for Let's Encrypt rate limits (exact set and generic) - Improved readability of SAN encapsulation task with descriptive name See conversation: https://chatgpt.com/share/68b1bc75-c3a0-800f-8861-fcf4f5f4a48c	2025-08-29 16:45:03 +02:00
Kevin Veen-Birkenbach	f36c7831b1	Implement dynamic TimeoutStartSec filter for domains and update roles ... - Added new filter plugin 'timeout_start_sec_for_domains' to calculate TimeoutStartSec based on number of domains. - Updated sys-ctl-hlth-csp and sys-ctl-hlth-webserver tasks to use the filter. - Removed obsolete systemctl.service.j2 in sys-ctl-hlth-csp. - Adjusted variable naming (CURRENT_PLAY_DOMAINS_ALL etc.) in multiple roles. - Updated srv-letsencrypt and sys-svc-certs to use uppercase vars. - Switched pretix role to sys-stk-full-stateful and removed leftover javascript.js. - Added unittests for the new filter under tests/unit/filter_plugins. See conversation: https://chatgpt.com/share/68b1ae9a-1ac0-800f-b49d-2915386a1a23	2025-08-29 15:44:31 +02:00
Kevin Veen-Birkenbach	009bee531b	Refactor role naming for TLS and proxy stack ... - Renamed role `srv-tls-core` → `sys-svc-certs` - Renamed role `srv-https-stack` → `sys-stk-front-pure` - Renamed role `sys-stk-front` → `sys-stk-front-proxy` - Updated all includes, READMEs, meta, and dependent roles accordingly This improves clarity and consistency of naming conventions for certificate management and proxy orchestration. See: https://chatgpt.com/share/68b19f2c-22b0-800f-ba9b-3f2c8fd427b0	2025-08-29 14:38:20 +02:00