Artur Mukhamadiev c853fff995 deploy: optional Uvicorn TLS with a name-constrained private CA for IP-only networks ...

scripts/make-tls.sh creates a CA whose critical nameConstraints permit only the
listed IPv4 addresses (and the .invalid DNS subtree), plus an end-entity server
certificate; run-backend.sh passes CONFLUENCE_WEB_TLS_CERT/KEY to uvicorn.

2026-09-15 00:01:24 +03:00

..

make-tls.sh

deploy: optional Uvicorn TLS with a name-constrained private CA for IP-only networks

2026-09-15 00:01:24 +03:00

run-backend.sh

deploy: optional Uvicorn TLS with a name-constrained private CA for IP-only networks

2026-09-15 00:01:24 +03:00