7 Commits

Include renames

Author	SHA1	Message	Date
tben	459eebf73d	Use the certs/ fallback in every environment ... TLS no longer depends on NODE_ENV: the TLS_* variables win, else certs/ is used whenever it exists (the container's /app/certs mount lands there too), and TLS_DISABLED=1 is the only way to serve plain HTTP with a certificate present. The plain-HTTP redirect listener now starts whenever TLS is on, not only in development, and HTTP_REDIRECT_PORT replaces DEV_HTTP_PORT. The installer writes TLS_DISABLED=1 for --no-https, and the health check follows the same rule.	2026-10-20 10:29:37 +01:00
tben	8c20c9a7ed	Ask about HTTPS on a fresh install ... A fresh install asks whether to serve HTTPS, with the reasons, before touching anything. --yes keeps the default, --no-https answers it, and an update keeps the saved mode. The prompt reads /dev/tty so `curl | bash` still works; without a terminal the default is explained instead. Also state why a production process is serving plain HTTP (no TLS vars), instead of only giving that hint in development.	2026-10-20 10:24:38 +01:00
tben	e859bab294	Serve HTTPS by default with a local CA ... The installer generates a CA and a 397-day certificate into $COBBLE_HOME/certs (in the app image, with the host's addresses), mounts the certificate, key and CA into the container and serves TLS from Bun on the published port. --no-https opts out; --https-cert/--https-key use a real certificate, --https-host adds names and --https-regen replaces the CA. The installer and the image health check use curl -k when TLS is on. The CA is served at /ca.crt and as an iOS/macOS profile at /ca.mobileconfig for one-tap install. Development picks up certs/ automatically, `bun run dev:phone` generates and starts, and a plain-HTTP listener on PORT + 1 redirects to HTTPS. Port sharing is off, so a stale dev server fails instead of silently answering on the same port.	2026-10-20 10:20:01 +01:00
tben	6c57fae444	Use short install URL in installer and docs	2026-10-20 08:35:36 +01:00
tben	e73eab3d41	Require the current container init setting on update	2026-10-20 07:45:06 +01:00
tben	2b2c41bebd	Check the image architecture before starting	2026-10-20 07:34:16 +01:00
tben	d0798a93a5	Add the self-hosted installer and release workflows	2026-10-20 07:02:58 +01:00