Files
computer-playbook/roles/sys-front-tls
kevinveenbirkenbach 8ba071da24 refactor(tls): rename cert_plan lookup to cert
Rename the certificate planning lookup from cert_plan to cert to better reflect
its role as the canonical certificate resolver.

This change updates:
- lookup plugin filename and error prefixes
- all lookup usages across roles and templates
- unit tests and internal documentation references
- CHANGELOG to reflect the new public lookup name

No functional behavior changed.

https://chatgpt.com/share/6985e838-488c-800f-8786-3269e587c14c
2026-02-06 14:10:03 +01:00
..

sys-front-tls

Generic TLS orchestrator that can be plugged in front of any web app reverse proxy.

Goal

Provide a unified interface for certificates and protocol selection, so application roles can switch TLS mode without touching app logic.

Supported modes (resolved outside or passed in):

  • letsencrypt -> use (and if missing: issue) Let's Encrypt certs
  • self_signed -> generate and store a self-signed certificate (SAN aware)
  • off -> no TLS, HTTP only