v2.2.1

2.2.1 (2026-09-10)

Bug Fixes

• tools: decode A-labels wherever punycode ends a label (df22d60)
• tools: turn down a name whose decode did not finish (233b152)

v2.2.0

2.2.0 (2026-09-10)

Features

• logging: spell domain names in unicode, with the a-label alongside (379d3eb)

v2.1.2

2.1.2 (2026-09-10)

Bug Fixes

• logging: log the client address as ip (c2f9be7)

v2.1.1

2.1.1 (2026-09-09)

Bug Fixes

• certs: back a domain off when the store refuses to renew it (02862ed)
• deps: update @postalsys/certs to 1.4.0 (e6b2019)

v2.1.0

2.1.0 (2026-09-08)

Features

• pace ACME orders against a shared budget and renew on a timer (#14) (5ec84b7)

v2.0.0

2.0.0 (2026-09-08)

⚠ BREAKING CHANGES

• certificates, private keys and the ACME account live in a new Redis layout under acme:<acme.key>:certs:*. An instance upgraded in place imports its account before the first order, and each certificate the first time its domain is looked up, so nothing is re-ordered from Let's Encrypt and the old entries are left to expire. A downgrade to 1.4.x will not see anything issued after the upgrade.

Features

• replace the @root ACME stack with @postalsys/certs (69dbbe8)

v1.4.1

1.4.1 (2026-09-01)

Miscellaneous Chores

• release 1.4.1 (4cd2694)

v1.4.0

1.4.0 (2026-08-31)

Features

• certs: renew certificates at two thirds of their lifetime (2ea8115)
• log: make the log level configurable (329d8ec)
• proxy: move to http-proxy-3 and make configured headers stick (693293e)

Bug Fixes

• certs: remember a domain that fails validation (37335e1)
• check-url: send the configured path and the domain with GET requests (953d816)
• cluster: replace a worker that dies instead of exiting (1e15b31)

Performance Improvements

• sni: serve a TLS handshake without reading Redis (8a2f577)

v1.3.2

1.3.2 (2023-10-05)

Bug Fixes

• deploy: changed env to vars (a968d17)
• deploy: changed env to vars (b638759)

v1.3.1

1.3.1 (2023-10-05)

Bug Fixes

• deploy: updated release script (44a35bf)