086ceda69b
Per-component Gateways had HTTP listeners with hostname-specific redirect routes that conflicted with cert-manager ACME HTTP-01 challenges. The redirect captured HTTP traffic before the challenge HTTPRoute could serve the token, creating a chicken-and-egg problem. Move the HTTP listener to a single shared acme-challenge Gateway with a wildcard listener (no hostname restriction, allowedRoutes from All). Add a global redirect-to-https HTTPRoute on this Gateway. Per-component Gateways now only have HTTPS listeners. The ACME challenge Exact path match takes priority over the redirect's implicit PathPrefix, so challenges are served correctly while all other HTTP traffic is redirected to HTTPS. Assisted-By: Claude AI Signed-off-by: Kirill Ilin <stitch14@yandex.ru> |
||
|---|---|---|
| .. | ||
| apps | ||
| core | ||
| extra | ||
| library | ||
| system | ||
| tests/cozy-lib-tests | ||