sjat b1aa0f49d9 fix(integration): verify probes :80 without following redirects ... Accept caddy's 308 on :80 as proof the DNAT+forward path is alive; don't follow into https (tls internal has no cert for a bare-IP request). This load-bearing end-to-end check is what caught the br-+/br-* nftables-wildcard bug that the string-presence assert missed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-18 16:57:47 +02:00
..
certs	feat(integration): askari profile, stub overlay, cert-tier files	2026-06-18 12:37:32 +02:00
overrides	feat(integration): allow SSH from the NAT gateway in the askari overlay	2026-06-18 16:35:15 +02:00
profiles	feat(integration): askari profile, stub overlay, cert-tier files	2026-06-18 12:37:32 +02:00
verify.yml	fix(integration): verify probes :80 without following redirects	2026-06-18 16:57:47 +02:00