docs: record acme-dns production issuance #16

2026-08-31T19:04:54Z

autonomic-bot commented

2026-08-31 19:04:54 +00:00

What changed

Records completed staging/production issuance, ACME ownership of the live certificate files, and the remaining gateway passthrough observation.

Why

A later orchestrator session needs the accurate renewal state and security boundary without consulting certificate or service logs.

Evidence

Direct TLS to cc-ci presents the new Let’s Encrypt production certificate, valid through 2026-11-29.
acme-dns UDP/TCP authority, localhost-only API, disabled registration, and active renewal timer were verified.
The public gateway TCP endpoint currently closes TLS before forwarding; it is documented as operator-owned external infrastructure.

## What changed Records completed staging/production issuance, ACME ownership of the live certificate files, and the remaining gateway passthrough observation. ## Why A later orchestrator session needs the accurate renewal state and security boundary without consulting certificate or service logs. ## Evidence - Direct TLS to cc-ci presents the new Let’s Encrypt production certificate, valid through 2026-11-29. - acme-dns UDP/TCP authority, localhost-only API, disabled registration, and active renewal timer were verified. - The public gateway TCP endpoint currently closes TLS before forwarding; it is documented as operator-owned external infrastructure.

autonomic-bot added 1 commit 2026-08-31 19:04:54 +00:00

docs: record acme-dns production issuance 02ff90777f

autonomic-bot merged commit f6c6b39b18 into main

2026-08-31 19:04:55 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: recipe-maintainers/cc-ci-orchestrator#16