Feat/dynamic domains tls - #2

Merged

codad5 merged 38 commits into

feat/dynamic-domains-tls

Jul 13, 2026

Commits on Jul 11, 2026

docs: rewrite dynamic-domains-tls.md as the full-scope final plan

codad5
and
claude
committed
feat(server): default RABA_HTTPS_PORT to 7222, not 443

codad5
and
claude
committed
docs: document install-server.sh's real flow, add proxy/systemd templates

codad5
and
claude
committed
feat(server): add cert metadata columns to domains table

codad5
and
claude
committed
feat(server): add Cloudflare DNS API client for ACME challenges

codad5
and
claude
committed
feat(server): add ACME order/challenge/finalize flow via instant-acme

codad5
and
claude
committed
feat(server): add on-disk + in-memory cert store

codad5
and
claude
committed
feat(server): wire a per-domain SNI cert resolver into https_listener.rs

codad5
and
claude
committed
feat(server): add cert renewal background task, wire ACME automation end to end

codad5
and
claude
committed
feat(server): add team custom domain API, close the domain-hijack gap

codad5
and
claude
committed
feat(server): add rate limiting on /api/auth/login

codad5
and
claude
committed
feat(server): add connection/stream caps

codad5
and
claude
committed
feat(server): add structured fire-and-forget request logging

codad5
and
claude
committed
feat(server): handle SIGINT/SIGTERM with a bounded shutdown grace period

codad5
and
claude
committed

Commits on Jul 12, 2026

Commits on Jul 13, 2026