fix: ECC cert support, ACME deploy hook path, NAT detection, and account config fallback

- Add find_cert_dir() to resolve both RSA and ECC (domain_ecc/) cert dirs
- Copy acme deploy hook to /deploy/ where acme.sh resolves it
- _parse_account_conf checks both legacy .account.conf and declarative config
- Skip public DNS check when all local IPs are private (NAT)
- Improve check message strings for validity and expiry status
- Support timezone-aware date formats in _days_until parsing
- Filter out "no" SAN domains in cert listing
- Bump frontend asset version cache keys
- Fix DOMContentLoaded race condition in app.js boot
- Fix spread operator in certs.js modal template

daemon/handlers/nginx.py

@@ -23,6 +23,7 @@ from daemon.iface import (
     POST_NGINX_TEST,
 )
 from daemon.server import NotFoundError, refresh_state, registry
+from lib.acme import find_cert_dir
 from lib.common import ensure_dirs, load_json, run, run_proc, save_json
 
 logger = logging.getLogger(__name__)
@@ -104,6 +105,8 @@ def _generate_server_conf(domain_cfg: dict[str, Any]) -> str:
         Rendered server block as a string.
     """
     tmpl = ENV.get_template("nginx/server_block.conf")
+    acme_home_path = PROJECT_DIR / "data" / "acme"
+    acme_cert_dir = str(find_cert_dir(domain_cfg["domain"], acme_home_path))
     return tmpl.render(
         domain=domain_cfg["domain"],
         backend=domain_cfg.get("backend", {}),
@@ -112,7 +115,7 @@ def _generate_server_conf(domain_cfg: dict[str, Any]) -> str:
         cert=domain_cfg.get("cert"),
         auth=domain_cfg.get("auth"),
         is_management=False,
-        acme_home=str(PROJECT_DIR / "data" / "acme"),
+        acme_cert_dir=acme_cert_dir,
         certs_dir=str(PROJECT_DIR / "data" / "certs"),
         acme_webroot=str(PROJECT_DIR / "data" / "acme" / "www"),
     )
@@ -209,6 +212,8 @@ def _write_all_sites() -> None:
     if cfg.get("management"):
         mgmt = cfg["management"]
         tmpl = ENV.get_template("nginx/server_block.conf")
+        acme_home_path = PROJECT_DIR / "data" / "acme"
+        acme_cert_dir = str(find_cert_dir(mgmt.get("domain", ""), acme_home_path))
         mgmt_conf = tmpl.render(
             domain=mgmt.get("domain"),
             backend=dict(
@@ -219,7 +224,7 @@ def _write_all_sites() -> None:
             cert=None,
             auth=mgmt.get("auth"),
             is_management=True,
-            acme_home=str(PROJECT_DIR / "data" / "acme"),
+            acme_cert_dir=acme_cert_dir,
             certs_dir=str(PROJECT_DIR / "data" / "certs"),
             acme_webroot=str(PROJECT_DIR / "data" / "acme" / "www"),
         )