Feature 57 (config and provisioning): modules declare config and provisions, their files rendered from templates; synced with main (issues of feature 57, 874)

2026-10-16 07:37:43 +00:00
parent 1a2c917abf
commit 9652b2d5ce
771 changed files with 52063 additions and 1774 deletions
@@ -84,3 +84,10 @@ traffic.
 | `ACME_CACHE` | `/acme` | where issued certificates persist; required when `TLS_LISTEN` is set, so a restart does not re-order |
 | `ACME_DIRECTORY` | Let's Encrypt **staging** in the binary; production in the module's `acme.env` | the issuer |
 | `ACME_CA_BUNDLE` | *(unset)* | a file of roots to trust for the issuer's own API — set only for a private/lab authority whose API certificate the world does not yet trust |
+
+## Answered by the provider helper (issue 792)
+
+A small Go program beside the proxy (`cmd/route-provider`) runs the SDK's provider helper for `route`, with no credential,
+and the offer says `"answered-by": "helper"`: a handed consumer (gitea's origins file) is filled by its machine's client
+from this module's entry, which carries the public names the controller composed for it. The module is **not** marked
+moved: its own files, `acme.env` and the broker secret, are composed as before, and the proxy itself is unchanged.