Paul Payne 76b3795485 docs: TLS hardening done (NATS + OpenBao) across both nodes ...

NATS tls:// + token and OpenBao HTTPS via the ACME wildcard cert (expose.tcp.tls),
no custom CA. civil + primer both cut over; plaintext rejected on both. Server
config + unseal.sh are instance-side (/data/castle, ~/.castle).

2026-07-07 05:57:58 -07:00

..

stacks

feat: resolve a program's pinned node version for build + runtime

2026-07-05 19:17:23 -07:00

design.md

docs: fix stale TLS/routing references (audit sweep)

2026-07-02 13:56:41 -07:00

developing-castle.md

docs: simplify lifecycle sections for the converge model

2026-07-02 12:20:33 -07:00

dns-and-tls.md

docs+install: sweep deploy/start → castle apply

2026-07-02 11:54:31 -07:00

fleet-mesh-plan.md

docs: TLS hardening done (NATS + OpenBao) across both nodes

2026-07-07 05:57:58 -07:00

registry.md

feat(core): single-source data_dir/repos_dir via castle.yaml

2026-07-06 23:02:33 -07:00

relationships.md

feat: deployment-scoped requires + UI editors, gateway nav, services filter

2026-07-06 04:00:24 -07:00

tcp-exposure.md

feat: raw-TCP exposure with castle-managed TLS + reach model

2026-07-04 23:04:26 -07:00

tunnel-setup.md

docs: fix stale TLS/routing references (audit sweep)

2026-07-02 13:56:41 -07:00