diff options
| author | Paul Buetow <paul@buetow.org> | 2026-08-03 10:27:49 +0300 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-08-03 10:27:49 +0300 |
| commit | a7d859681f5508a829115376d9dd993f3f137321 (patch) | |
| tree | 272a080c3a21a2345e916a961b035b3fe8b46627 /f3s/apache | |
| parent | 7785a4281d6fc2b33eae2face2505cd892d733d4 (diff) | |
frontends: give f3s hosts a standby.<host> SAN instead of a separate cert
f3s hosts don't get a distinct standby certificate/keypair; alias the
primary cert's files under the standby name (relayd selects a keypair
by SNI, so it needs matching filenames) and add standby.<host> as a
SAN on the primary cert. Every host now also gets www.<host> as a SAN
unconditionally, since public DNS publishes www for all of them.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Diffstat (limited to 'f3s/apache')
0 files changed, 0 insertions, 0 deletions