feat: add optional letsencrypt tls

2026-06-24 11:06:33 +02:00
parent 1e3685bab8
commit 719cdce9c1
19 changed files with 561 additions and 62 deletions
@@ -4,6 +4,9 @@ Date: 2026-06-24

 Status: Accepted

+TLS aspects of this decision are extended by
+[ADR-0003](0003-optional-letsencrypt.md).
+
 ## Context

 The Compose stack exposes Astro and Wagtail on separate local ports. Azione!Lab needs
@@ -35,8 +38,8 @@ TLS termination is outside this local implementation.
  share the public domain.
 - Replacing Astro or Django with static files served directly by NGINX was rejected as
  unnecessary for the requested local stack.
- Adding automatic certificates was deferred because DNS and certificate ownership are
-  not part of this task.
+- Adding automatic certificates was initially deferred because DNS and certificate
+  ownership were not part of this task; ADR-0003 later adds an opt-in implementation.

 ## Security impact