kevinveenbirkenbachandClaude Opus 5.5 694007c58a feat(sys-svc-cln-domains): remove the nginx configs of domains the host no longer serves ...

Retired apps, aliases and legacy zones left their vhosts behind, so 37 legacy cymais.cloud subdomains kept serving a certificate that does not name them after the zone moved to one wildcard redirect. With MODE_CLEANUP the role now deletes every <domain>.conf below the servers directory whose domain is not in CURRENT_PLAY_DOMAINS_ALL, the domains of every application in group_names and its dependencies including redirect sources; files not named after a domain and onion services stay.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-23 21:25:50 +02:00

..

cli

feat(inventory): reject unread keys and a missing Cloudflare token before the deploy

2026-10-23 16:18:12 +02:00

group_vars

test(wireguard): the layer follows group membership

2026-10-16 21:26:17 +02:00

library

perf(svc-db-openldap): converge the user entries over one connection

2026-10-23 19:59:37 +02:00

plugins

feat(web-opt-rdr-domains): redirect a whole legacy zone with one wildcard source

2026-10-23 20:17:19 +02:00

roles

feat(sys-svc-cln-domains): remove the nginx configs of domains the host no longer serves

2026-10-23 21:25:50 +02:00

scripts

fix(apparmor): keep docker-default loaded when tearing AppArmor down

2026-10-20 12:11:14 +02:00

utils

fix(tls): serve every redirect source the certificate that names it

2026-10-23 20:14:21 +02:00

__init__.py

…