docs: add docstrings to all API endpoints and daemon handlers

Add comprehensive docstrings to firewall, DHCP, proxy, wireguard, certs,
and logs API endpoints. Document parameters, return values, and error cases
for the documentation system.

webui/api/certs.py

@@ -16,6 +16,11 @@ bp = Blueprint("certs", __name__)
 
 @bp.route("/list", methods=["GET"])
 def list_certs_bp():
+    """GET /api/certs/list — list all managed ACME certificates.
+
+    Returns:
+        Response containing the list of certificates or an error message.
+    """
     try:
         return _ok(get("/acme/list"))
     except RuntimeError as exc:
@@ -25,6 +30,14 @@ def list_certs_bp():
 
 @bp.route("/<domain>", methods=["GET"])
 def cert_details(domain: str):
+    """GET /api/certs/<domain> — get details for a specific certificate.
+
+    Args:
+        domain: Domain name to look up.
+
+    Returns:
+        Response containing certificate info or an error message.
+    """
     try:
         return _ok(get("/acme/info", {"domain": domain}))
     except NotFound as exc:
@@ -37,6 +50,13 @@ def cert_details(domain: str):
 
 @bp.route("/validate", methods=["POST"])
 def validate():
+    """POST /api/certs/validate — run pre-flight checks for certificate issuance.
+
+    Expects JSON body with ``{``domain``}``.
+
+    Returns:
+        Response containing validation results or an error message.
+    """
     body = request.get_json(silent=True) or {}
     domain = body.get("domain", "").strip()
     if not domain:
@@ -54,6 +74,13 @@ def validate():
 
 @bp.route("/issue/start", methods=["POST"])
 def issue_start():
+    """POST /api/certs/issue/start — create a new certificate issuance request.
+
+    Expects JSON body with ``{``domain``}``; optional ``email`` and ``webroot``.
+
+    Returns:
+        Response containing an issuance request ID or an error message.
+    """
     body = request.get_json(silent=True) or {}
     domain = body.get("domain", "").strip()
     if not domain:
@@ -81,6 +108,14 @@ def issue_start():
 
 @bp.route("/issue/<request_id>", methods=["GET"])
 def issue_status(request_id: str):
+    """GET /api/certs/issue/<request_id> — poll status of a certificate issuance request.
+
+    Args:
+        request_id: Issuance request identifier returned by issue_start.
+
+    Returns:
+        Response containing issuance status or an error message.
+    """
     try:
         result = get("/acme/issue/status", {"id": request_id})
         return _ok(result)
@@ -94,6 +129,14 @@ def issue_status(request_id: str):
 
 @bp.route("/<domain>/renew", methods=["POST"])
 def renew_bp(domain: str):
+    """POST /api/certs/<domain>/renew — renew an existing certificate.
+
+    Args:
+        domain: Domain name whose certificate should be renewed.
+
+    Returns:
+        Response confirming renewal or an error message.
+    """
     try:
         logger.info("Certificate renewal requested for '%s' via API", domain)
         post("/acme/renew", {"domain": domain})
@@ -109,6 +152,14 @@ def renew_bp(domain: str):
 
 @bp.route("/<domain>", methods=["DELETE"])
 def remove_bp(domain: str):
+    """DELETE /api/certs/<domain> — remove a certificate from ACME management.
+
+    Args:
+        domain: Domain name whose certificate should be removed.
+
+    Returns:
+        Response confirming removal or an error message.
+    """
     try:
         delete("/acme/remove", {"domain": domain})
         logger.info("Certificate removed for '%s' via API", domain)
@@ -123,6 +174,13 @@ def remove_bp(domain: str):
 
 @bp.route("/email", methods=["POST"])
 def set_email_bp():
+    """POST /api/certs/email — set the ACME account email address.
+
+    Expects JSON body with ``{``email``}``.
+
+    Returns:
+        Response confirming the email was set or an error message.
+    """
     body = request.get_json(silent=True) or {}
     email = body.get("email", "").strip()
     if not email: