Files
computer-playbook/roles/sys-front-tls
kevinveenbirkenbach eaec310b7a Merge branch 'main' into feature/store-i18n
# Conflicts:
#	roles/web-app-akaunting/TODO.md
#	roles/web-app-friendica/meta/volumes.yml
#	roles/web-app-fusiondirectory/TODO.md
#	roles/web-app-keycloak/TODO.md
#	roles/web-app-lam/meta/volumes.yml
#	roles/web-app-phpmyadmin/meta/volumes.yml
#	roles/web-app-pixelfed/meta/volumes.yml
#	scripts/docker/cache/package.sh
2026-10-22 07:59:04 +02:00
..

sys-front-tls

Description

Generic TLS orchestrator that can be plugged in front of any web app reverse proxy.

Overview

Provide a unified interface for certificates and protocol selection, so application roles can switch TLS mode without touching app logic.

Supported modes (resolved outside or passed in):

  • letsencrypt -> use (and if missing: issue) Let's Encrypt certs
  • self_signed -> generate and store a self-signed certificate (SAN aware)
  • off -> no TLS, HTTP only

Features

  • Automated provisioning: Configured by Ansible without manual steps.