wild-central

Go to file

Paul Payne c7a0227e03 feat: Wire up TLS cert provisioning in reconciliation

When HTTP services are registered (where Central terminates TLS),
reconciliation now checks for and provisions TLS certificates:

- Derives gateway domain from central domain (e.g., payne.io)
- Checks for existing wildcard cert (*.payne.io)
- If no wildcard exists and Cloudflare token + operator email are
  configured, provisions one via certbot DNS-01
- For services outside the gateway domain, provisions individual certs
- Services with TLS passthrough (k8s) are skipped (backend handles TLS)
- Graceful: skips silently if no Cloudflare token or email configured

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-07-09 13:36:49 +00:00

internal

feat: Wire up TLS cert provisioning in reconciliation

2026-07-09 13:36:49 +00:00

web

feat: Show Registered Services on Ingress Proxy page

2026-07-09 05:43:32 +00:00

.air.toml

feat: Add dev environment config (.envrc + .air.toml)

2026-07-09 04:13:58 +00:00

.envrc

fix: Add WILD_CENTRAL_ENV=development to .envrc