recipe-maintainers/cc-ci
0
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

feat: promote acme-dns renewal to production #28

Merged
autonomic-bot merged 1 commits from feat/acme-dns-production-cutover into main 2026-08-31 18:54:09 +00:00
Conversation 0 Commits 1 Files Changed 1
+11 -5
autonomic-bot commented 2026-08-31 18:54:02 +00:00
Owner
Copy Link
Copy Source

What changed

Promotes the proven ci.commoninternet.net DNS-01 configuration from Let’s Encrypt staging to production and declaratively enables the existing Traefik certificate handoff.

Why

The permanent Gandi CNAME and narrow acme-dns delegation have now completed a successful staging SAN issuance for both ci.commoninternet.net and *.ci.commoninternet.net.

Evidence

  • The staging ACME order validated both DNS-01 challenges and received a certificate at 18:52 UTC.
  • Lego found the permanent CNAME and used the local restricted acme-dns account; no Gandi API credential is present.
  • NixOS configuration evaluation succeeds.
  • The post-run handoff remains atomic and uses the existing health-gated Traefik reconciliation.
## What changed Promotes the proven `ci.commoninternet.net` DNS-01 configuration from Let’s Encrypt staging to production and declaratively enables the existing Traefik certificate handoff. ## Why The permanent Gandi CNAME and narrow acme-dns delegation have now completed a successful staging SAN issuance for both `ci.commoninternet.net` and `*.ci.commoninternet.net`. ## Evidence - The staging ACME order validated both DNS-01 challenges and received a certificate at 18:52 UTC. - Lego found the permanent CNAME and used the local restricted acme-dns account; no Gandi API credential is present. - NixOS configuration evaluation succeeds. - The post-run handoff remains atomic and uses the existing health-gated Traefik reconciliation.
autonomic-bot added 1 commit 2026-08-31 18:54:03 +00:00
feat: promote acme-dns renewal to production 1415cc53c6
autonomic-bot merged commit f42dbc3f82 into main 2026-08-31 18:54:09 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
autonomic autonomic-bot kawaiipunk (KawaiiPunk) notplants trav (Trav Fryer)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/cc-ci#28