vacuum-wall

Files

T

mteehan 6476695d29 fix: ACME cert list self-heals when account.conf is left owner-only

The startup normalize and _run_acme_preflight covered daemon startup and issue/renew, but the recurring collector poll called lib.acme.list_certs() without normalizing ACME_HOME. A non-daemon run (e.g. a manual run as the WebUI user) re-creating account.conf owner-only made every acme.sh --list exit 2, so the collector returned certs=[] and the UI showed no certs until the next issue/renew or daemon restart.

- collector: normalize_acme_home() before list_certs() so the poll self-heals
- issue pre-check: normalize before the direct lib.acme.list_certs()
- _parse_account_conf: read acme.sh v3 account.conf (not just .account.conf)
- _collect_acme: actionable status.error for the account.conf perm case
- install.sh: chown ACME_HOME conf files to the daemon user

2026-09-04 21:38:55 +00:00

__init__.py

refactor: introduce two-user daemon architecture with socket-based communication

2026-05-27 23:39:33 +00:00

acme.py

fix: ACME cert list self-heals when account.conf is left owner-only

2026-09-04 21:38:55 +00:00

auth.py

fix: auth review fixes — token revocation, WS auth, seeding, and hardening

2026-08-17 01:45:15 +00:00

common.py

refactor: daemon collectors, thin webui proxies, pure config reads