Skip to content

SEC-001: add Caddy TLS distribution - #19

Merged
NeoUKR merged 1 commit into
mainfrom
agent/14-tls
Aug 3, 2026
Merged

SEC-001: add Caddy TLS distribution#19
NeoUKR merged 1 commit into
mainfrom
agent/14-tls

Conversation

@NeoUKR

@NeoUKR NeoUKR commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Summary

  • put Caddy 2.11.4 in front of the private Gunicorn service
  • enforce HTTP-to-HTTPS, HSTS, persistent ACME state, and secret-safe proxy logging
  • include the pinned proxy image, configuration, user-key helper, and TLS verification in the offline bundle

Verification

  • 53 Python tests passed
  • release Compose configuration validated
  • Caddy configuration validated
  • offline bundle integrity passed for 35 files

Closes #14
Related: DataSetsManager/client#5
Related: Drone-Age/VINS-NEO#11
Related: Drone-Age/IVINS#7

@NeoUKR
NeoUKR marked this pull request as ready for review August 3, 2026 17:44
@NeoUKR
NeoUKR merged commit b3ca050 into main Aug 3, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[SEC-001] Захистити HTTP-маршрутизацію / Protect Internet-facing HTTP routing

1 participant