mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-12 21:56:21 +00:00
# Conflicts: # roles/web-app-akaunting/TODO.md # roles/web-app-friendica/meta/volumes.yml # roles/web-app-fusiondirectory/TODO.md # roles/web-app-keycloak/TODO.md # roles/web-app-lam/meta/volumes.yml # roles/web-app-phpmyadmin/meta/volumes.yml # roles/web-app-pixelfed/meta/volumes.yml # scripts/docker/cache/package.sh
sys-front-tls
Description
Generic TLS orchestrator that can be plugged in front of any web app reverse proxy.
Overview
Provide a unified interface for certificates and protocol selection, so application roles can switch TLS mode without touching app logic.
Supported modes (resolved outside or passed in):
- letsencrypt -> use (and if missing: issue) Let's Encrypt certs
- self_signed -> generate and store a self-signed certificate (SAN aware)
- off -> no TLS, HTTP only
Features
- Automated provisioning: Configured by Ansible without manual steps.