mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-12 13:47:01 +00:00
Rename the certificate planning lookup from cert_plan to cert to better reflect its role as the canonical certificate resolver. This change updates: - lookup plugin filename and error prefixes - all lookup usages across roles and templates - unit tests and internal documentation references - CHANGELOG to reflect the new public lookup name No functional behavior changed. https://chatgpt.com/share/6985e838-488c-800f-8786-3269e587c14c
sys-front-tls
Generic TLS orchestrator that can be plugged in front of any web app reverse proxy.
Goal
Provide a unified interface for certificates and protocol selection, so application roles can switch TLS mode without touching app logic.
Supported modes (resolved outside or passed in):
- letsencrypt -> use (and if missing: issue) Let's Encrypt certs
- self_signed -> generate and store a self-signed certificate (SAN aware)
- off -> no TLS, HTTP only