3 commits

Author	SHA1	Message	Date
sjat	64f1e821d8	docs(review): 2026-06-14 repo audit — M4a doc drift + Traefik→Caddy lag ... 11 safe auto-fixes (docs/comments only): reverse_proxy meta stale DNS-01 description, base/playbooks/scripts/terraform/public_dns README build-state, CAPABILITIES reverse-proxy Traefik→Caddy, README ADR list → 024, TF cax11→cx23 stamps, public_dns wildcard DNS-01→HTTP-01 comment. 29 open findings reported. make lint green. No stale-deferred (ADR-011 open questions still open). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 18:37:54 +02:00
sjat	1ee343dfca	feat(tf): open Caddy 80/443 + NetBird 3478 on askari (public_web) ... hetzner_vm gains a public_web bool (default false); offsite sets it true. Firewall adds 80/443 tcp + 3478 udp from anywhere (SSH-from-ubongo preserved). For M4 Caddy + NetBird. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 17:38:51 +02:00
sjat	bbc287900a	feat(tf): hetzner_vm module (server + firewall + ssh key + cloud-init) ... Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 12:03:01 +02:00