feat(dstack-ingress): TLS-ALPN-01 mode that needs no DNS credentials - #105

Merged

kvinwang merged 16 commits into

mainfrom

feat/tls-alpn-01

Jul 28, 2026

Commits on Jul 28, 2026

feat(dstack-ingress): add tls-alpn-01 mode that needs no DNS credentials
kvinwang
committed
fix(dstack-ingress): serialize bootstrap with the renewal daemon and let the gateway's DNS cache expire

Kevin Wang
authored and
kvinwang
committed
refactor(dstack-ingress): make one process own the certificate lifecycle

Kevin Wang
authored and
kvinwang
committed
fix(dstack-ingress): bind the evidence server to loopback

Kevin Wang
authored and
kvinwang
committed
refactor(dstack-ingress): give each challenge type its own top-level script

Kevin Wang
authored and
kvinwang
committed
fix(dstack-ingress): let lego report renewals instead of inferring them

Kevin Wang
authored and
kvinwang
committed
docs(dstack-ingress): name the ACME account settings after ACME, not certbot

Kevin Wang
authored and
kvinwang
committed
feat(dstack-ingress): make the ACME contact address optional

Kevin Wang
authored and
kvinwang
committed
fix(dstack-ingress): count either issuance attempt as a change

Kevin Wang
authored and
kvinwang
committed
fix(dstack-ingress): stop dns-01 running the first pass twice
kvinwang
committed
fix(dstack-ingress): stop the placeholder path reporting itself as a failure
kvinwang
committed
feat(dstack-ingress): honour RENEW_DAYS_BEFORE on dns-01, and document testing
kvinwang
committed
docs(dstack-ingress): warn that RENEW_DAYS_BEFORE keeps the cert permanently due
kvinwang
committed
fix(dstack-ingress): reject tls-alpn-01 wildcards at startup, not per pass
kvinwang
committed
fix(dstack-ingress): make ACME_STAGING work in both modes, not just tls-alpn-01
kvinwang
committed
fix(dstack-ingress): carry the #104 challenge delegation through the restructure
kvinwang
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(dstack-ingress): TLS-ALPN-01 mode that needs no DNS credentials - #105

feat(dstack-ingress): TLS-ALPN-01 mode that needs no DNS credentials#105
kvinwang merged 16 commits into
mainfrom
feat/tls-alpn-01

Commits on Jul 28, 2026

feat(dstack-ingress): add tls-alpn-01 mode that needs no DNS credentials

fix(dstack-ingress): serialize bootstrap with the renewal daemon and let the gateway's DNS cache expire

refactor(dstack-ingress): make one process own the certificate lifecycle

fix(dstack-ingress): bind the evidence server to loopback

refactor(dstack-ingress): give each challenge type its own top-level script

fix(dstack-ingress): let lego report renewals instead of inferring them

docs(dstack-ingress): name the ACME account settings after ACME, not certbot

feat(dstack-ingress): make the ACME contact address optional

fix(dstack-ingress): count either issuance attempt as a change

fix(dstack-ingress): stop dns-01 running the first pass twice

fix(dstack-ingress): stop the placeholder path reporting itself as a failure

feat(dstack-ingress): honour RENEW_DAYS_BEFORE on dns-01, and document testing

docs(dstack-ingress): warn that RENEW_DAYS_BEFORE keeps the cert permanently due

fix(dstack-ingress): reject tls-alpn-01 wildcards at startup, not per pass

fix(dstack-ingress): make ACME_STAGING work in both modes, not just tls-alpn-01

fix(dstack-ingress): carry the #104 challenge delegation through the restructure