4 Commits

Include renames

Author	SHA1	Message	Date
tben	8bf6bedec5	Serve plain HTTP only and drop the local certificate tooling ... The app never terminates TLS: a reverse proxy or tunnel does, and isSecureRequest still reads X-Forwarded-Proto so cookies stay Secure. Removes the cert generator, TLS resolution and HTTP redirect, the local CA download, and the TLS envs, and trims the installer, Dockerfile health check and docs to match. Also softens the composer's loading row.	2026-10-21 15:35:27 +01:00
tben	e859bab294	Serve HTTPS by default with a local CA ... The installer generates a CA and a 397-day certificate into $COBBLE_HOME/certs (in the app image, with the host's addresses), mounts the certificate, key and CA into the container and serves TLS from Bun on the published port. --no-https opts out; --https-cert/--https-key use a real certificate, --https-host adds names and --https-regen replaces the CA. The installer and the image health check use curl -k when TLS is on. The CA is served at /ca.crt and as an iOS/macOS profile at /ca.mobileconfig for one-tap install. Development picks up certs/ automatically, `bun run dev:phone` generates and starts, and a plain-HTTP listener on PORT + 1 redirects to HTTPS. Port sharing is off, so a stale dev server fails instead of silently answering on the same port.	2026-10-20 10:20:01 +01:00
tben	6c57fae444	Use short install URL in installer and docs	2026-10-20 08:35:36 +01:00
tben	f20f20f8a2	Document the release and launch checklist	2026-10-20 07:43:55 +01:00