2 Commits

Include renames

Author	SHA1	Message	Date
mhoennigandClaude Fable 5	800fcae2f7	Bundle certbot's DH parameters as a resource instead of downloading them ... certbot removed ssl-dhparams.pem from its repository, so the managed-nginx startup failed with HTTP 404 on fresh installations (the legacy script only kept working through its year-old state-dir cache). The RFC 7919 ffdhe2048 parameters are now a classpath resource; the download seam and NginxConfigFiles.DH_PARAMS_URL are gone. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-10 15:34:20 +02:00
Michael HoennigandClaude Fable 5	b104eeee05	added opt-in managed nginx/TLS container (ADR 0005, plan step 13): server.nginx.* config serves GitTally over HTTPS on hosts without a reverse proxy — two-phase startup (ACME webroot via certbot container, then full HTTPS config), daily certificate renewal with nginx reload, labelled container removed on shutdown; all failures are non-fatal, the plain HTTP server keeps running ... Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-08 21:51:33 +02:00