8 Commits

Include renames

Author	SHA1	Message	Date
tben	8bf6bedec5	Serve plain HTTP only and drop the local certificate tooling ... The app never terminates TLS: a reverse proxy or tunnel does, and isSecureRequest still reads X-Forwarded-Proto so cookies stay Secure. Removes the cert generator, TLS resolution and HTTP redirect, the local CA download, and the TLS envs, and trims the installer, Dockerfile health check and docs to match. Also softens the composer's loading row.	2026-10-21 15:35:27 +01:00
tben	459eebf73d	Use the certs/ fallback in every environment ... TLS no longer depends on NODE_ENV: the TLS_* variables win, else certs/ is used whenever it exists (the container's /app/certs mount lands there too), and TLS_DISABLED=1 is the only way to serve plain HTTP with a certificate present. The plain-HTTP redirect listener now starts whenever TLS is on, not only in development, and HTTP_REDIRECT_PORT replaces DEV_HTTP_PORT. The installer writes TLS_DISABLED=1 for --no-https, and the health check follows the same rule.	2026-10-20 10:29:37 +01:00
tben	8c20c9a7ed	Ask about HTTPS on a fresh install ... A fresh install asks whether to serve HTTPS, with the reasons, before touching anything. --yes keeps the default, --no-https answers it, and an update keeps the saved mode. The prompt reads /dev/tty so `curl | bash` still works; without a terminal the default is explained instead. Also state why a production process is serving plain HTTP (no TLS vars), instead of only giving that hint in development.	2026-10-20 10:24:38 +01:00
tben	e859bab294	Serve HTTPS by default with a local CA ... The installer generates a CA and a 397-day certificate into $COBBLE_HOME/certs (in the app image, with the host's addresses), mounts the certificate, key and CA into the container and serves TLS from Bun on the published port. --no-https opts out; --https-cert/--https-key use a real certificate, --https-host adds names and --https-regen replaces the CA. The installer and the image health check use curl -k when TLS is on. The CA is served at /ca.crt and as an iOS/macOS profile at /ca.mobileconfig for one-tap install. Development picks up certs/ automatically, `bun run dev:phone` generates and starts, and a plain-HTTP listener on PORT + 1 redirects to HTTPS. Port sharing is off, so a stale dev server fails instead of silently answering on the same port.	2026-10-20 10:20:01 +01:00
tben	6c57fae444	Use short install URL in installer and docs	2026-10-20 08:35:36 +01:00
tben	e73eab3d41	Require the current container init setting on update	2026-10-20 07:45:06 +01:00
tben	2b2c41bebd	Check the image architecture before starting	2026-10-20 07:34:16 +01:00
tben	d0798a93a5	Add the self-hosted installer and release workflows	2026-10-20 07:02:58 +01:00