Oier Bravo Urtasun 390f8c78af feat(caddy): serve Caddy root CA at /ca.crt for guest trust ...

Air-gap mirror uses tls internal; guests must trust Caddy's local CA. Serve it
at http://<domain>/ca.crt from a world-readable mount (the live pki dir is
root-only 0600). build-stack --up mirror|full exports the CA after bring-up;
landing page links it. Pre-creates the mount target to avoid a dir bind.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-24 05:32:31 +02:00

..

conf.d

feat(caddy): serve Caddy root CA at /ca.crt for guest trust

2026-05-24 05:32:31 +02:00

Caddyfile

refactor(caddy): split vhosts into conf.d snippets (core/static/mirror)

2026-05-24 05:07:20 +02:00