docs: add docstrings to all API endpoints and daemon handlers

Add comprehensive docstrings to firewall, DHCP, proxy, wireguard, certs,
and logs API endpoints. Document parameters, return values, and error cases
for the documentation system.

webui/api/proxy.py

@@ -16,6 +16,16 @@ bp = Blueprint("proxy", __name__)
 
 @bp.route("/ssl-apply", methods=["POST"])
 def ssl_apply_bp():
+    """Apply SSL snippet config.
+
+    POST /api/proxy/ssl-apply
+
+    Returns:
+        ``{"ok": true}`` on success.
+
+    Raises:
+        RuntimeError: If nginx SSL snippet write fails.
+    """
     try:
         post("/nginx/ssl-apply")
         logger.info("SSL snippet written via API")
@@ -27,6 +37,13 @@ def ssl_apply_bp():
 
 @bp.route("/config", methods=["GET"])
 def get_config_bp():
+    """Get the current nginx proxy configuration.
+
+    GET /api/proxy/config
+
+    Returns:
+        Current config dict from the daemon.
+    """
     try:
         return _ok(get("/nginx/config"))
     except RuntimeError as exc:
@@ -36,6 +53,16 @@ def get_config_bp():
 
 @bp.route("/config", methods=["POST"])
 def post_config():
+    """Save the nginx proxy configuration.
+
+    POST /api/proxy/config
+
+    Body:
+        Any JSON object to merge into the config.
+
+    Returns:
+        ``{"ok": true}`` on success.
+    """
     body = request.get_json(silent=True) or {}
     if not isinstance(body, dict):
         return _error("Request body must be a JSON object", 400)
@@ -53,6 +80,16 @@ def post_config():
 
 @bp.route("/config", methods=["PATCH"])
 def patch_config():
+    """Partially update the nginx proxy configuration.
+
+    PATCH /api/proxy/config
+
+    Body:
+        JSON object with fields to patch.
+
+    Returns:
+        ``{"ok": true}`` on success.
+    """
     body = request.get_json(silent=True) or {}
     if not isinstance(body, dict):
         return _error("Request body must be a JSON object", 400)
@@ -70,6 +107,13 @@ def patch_config():
 
 @bp.route("/domains", methods=["GET"])
 def list_domains():
+    """List all configured proxy domains.
+
+    GET /api/proxy/domains
+
+    Returns:
+        List of domain dicts from the daemon.
+    """
     try:
         return _ok(get("/nginx/domains"))
     except RuntimeError as exc:
@@ -79,6 +123,21 @@ def list_domains():
 
 @bp.route("/domains", methods=["POST"])
 def add_domain_bp():
+    """Add a new proxy domain.
+
+    POST /api/proxy/domains
+
+    Body fields:
+        domain: Domain name.
+        backend_host: Upstream host.
+        backend_port: Upstream port.
+        backend_proto: Protocol (``http`` or ``https``, default ``http``).
+        cert: Optional certificate type.
+        extra_headers: Optional extra headers dict.
+
+    Returns:
+        ``{"domain": ...}`` on success.
+    """
     body = request.get_json(silent=True) or {}
     domain = body.get("domain", "").strip()
     backend_host = body.get("backend_host", "").strip()
@@ -116,6 +175,16 @@ def add_domain_bp():
 
 @bp.route("/domains/<domain>", methods=["PUT"])
 def update_domain_bp(domain):
+    """Update an existing proxy domain in-place.
+
+    PUT /api/proxy/domains/<domain>
+
+    Body fields:
+        Fields to merge into the domain config.
+
+    Returns:
+        ``{"domain": ...}`` on success.
+    """
     body = request.get_json(silent=True) or {}
     if not body:
         return _error("Request body must be a JSON object with fields to update", 400)
@@ -136,6 +205,13 @@ def update_domain_bp(domain):
 
 @bp.route("/domains/<domain>", methods=["DELETE"])
 def remove_domain_bp(domain):
+    """Remove a proxy domain.
+
+    DELETE /api/proxy/domains/<domain>
+
+    Returns:
+        ``{"domain": ...}`` on success.
+    """
     try:
         delete("/nginx/domains/remove", {"domain": domain})
         logger.info("Proxy domain removed via API: %s", domain)
@@ -150,6 +226,13 @@ def remove_domain_bp(domain):
 
 @bp.route("/apply", methods=["POST"])
 def apply_bp():
+    """Generate all nginx configs and reload nginx.
+
+    POST /api/proxy/apply
+
+    Returns:
+        ``{"ok": true}`` on success.
+    """
     try:
         post("/nginx/apply")
         logger.info("nginx config applied via API")
@@ -161,6 +244,13 @@ def apply_bp():
 
 @bp.route("/test", methods=["POST"])
 def test_bp():
+    """Test nginx configuration without reloading.
+
+    POST /api/proxy/test
+
+    Returns:
+        ``{"valid": true, "output": ...}`` on success. Returns 400 if test fails.
+    """
     try:
         result = post("/nginx/test")
         if result.get("valid"):
@@ -173,6 +263,20 @@ def test_bp():
 
 @bp.route("/management", methods=["POST"])
 def management_bp():
+    """Configure the management reverse proxy for the WebUI.
+
+    POST /api/proxy/management
+
+    Body fields:
+        domain: Management domain name.
+        flask_host: Upstream Flask host (default ``127.0.0.1``).
+        flask_port: Upstream Flask port (default 9090).
+        auth_user: Optional basic-auth username.
+        auth_pass: Optional basic-auth password.
+
+    Returns:
+        ``{"ok": true}`` on success.
+    """
     body = request.get_json(silent=True) or {}
     domain = body.get("domain", "").strip()
     if not domain: