Sergei Poljanski
cf142c6e3b
Some checks failed
deploy / ansible (push) Failing after 59s
Traefik never requests a certificate for a name it already holds one for, so the XMPP certificate came out without asxp.io, the XMPP domain itself. ejabberd picks the matching certificate file per domain, so push two: the site's asxp.io certificate and xmpp.asxp.io + conference. The receiver takes the name from the SSH command (asxp.io or a subdomain), checks the certificate matches it, and retires the hand-made server.pem once both files are in place. A second probe on 5223 sends SNI asxp.io, as clients do, and the outdated-certificate alert compares each served certificate with its source in acme.json. Assisted-by: Claude:opus-5-5 |
||
|---|---|---|
| .. | ||
| acme_forward | ||
| base | ||
| crawler_alert | ||
| docker_service | ||
| forgejo | ||
| forgejo_runner | ||
| forgejo_runner_interop | ||
| minecraft | ||
| monitoring | ||
| monitoring_agent | ||
| restic_backup | ||
| s3_replicate | ||
| s3fs | ||
| sillytavern | ||
| ssh_hardening | ||
| swap | ||
| traefik | ||
| wireguard | ||
| xmpp | ||
| xmpp_cert_sync | ||
| xray | ||