Paul Payne 7e8f660d11 feat: Per-service certs with opt-in wildcard provisioning ...

Remove automatic wildcard cert assumption. Each service gets its own
cert by default. Wildcards are user-initiated via the Certificates page.

Backend:
- HAProxy L7 frontend uses cert directory (/etc/haproxy/certs/)
  instead of single wildcard file — loads all PEMs, serves by SNI
- Cert status API shows every registered service individually with
  coveredBy field when a wildcard cert covers the domain
- Reconciliation filters L7 routes to services that have a cert
- No auto-provisioning in reconciliation (just warnings)

Frontend:
- Certificates page shows per-service cert status
- "Provision" button for individual certs
- "Add Wildcard" form for opt-in wildcard provisioning
- Fixed CloudflareComponent type errors from cert API changes

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-07-09 14:47:00 +00:00

..

handlers_certbot.go

feat: Per-service certs with opt-in wildcard provisioning

2026-07-09 14:47:00 +00:00

handlers_cloudflare.go

feat: Add Cloudflare token verification endpoint

2026-07-09 04:34:03 +00:00

handlers_config_test.go

feat: Add tests for config, secrets, services, and cloudflare endpoints

2026-07-09 04:45:55 +00:00

handlers_crowdsec.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_ddns_test.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_ddns.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_dnsmasq_test.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_dnsmasq.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_haproxy_test.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_haproxy.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_nftables_test.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_nftables.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_services_test.go

feat: Add tests for config, secrets, services, and cloudflare endpoints

2026-07-09 04:45:55 +00:00

handlers_services.go

feat: Add tests for config, secrets, services, and cloudflare endpoints

2026-07-09 04:45:55 +00:00

handlers_sse.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers_wireguard.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

handlers.go

feat: Self-register Wild Central on startup

2026-07-09 05:40:27 +00:00

helpers.go

feat: Per-service certs with opt-in wildcard provisioning

2026-07-09 14:47:00 +00:00

middleware.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

response.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

test_helpers_test.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00

validation.go

feat: Extract Wild Central as standalone Go service

2026-07-08 23:31:16 +00:00