hsiegeln e167d5475e
All checks were successful
CI / build (push) Successful in 39s
CI / docker (push) Successful in 40s
feat: production-ready TLS with self-signed cert init container
Standard OIDC architecture: subdomain routing (auth.HOST, server.HOST),
TLS via Traefik, self-signed cert auto-generated on first boot.

- Add traefik-certs init container (generates wildcard self-signed cert)
- Enable TLS on all Traefik routers (websecure entrypoint)
- HTTP→HTTPS redirect in traefik.yml
- Host-based routing for all services (no more path conflicts)
- PUBLIC_PROTOCOL env var (https default, configurable)
- Protocol-aware redirect URIs in bootstrap
- Protocol-aware UI fallbacks

Customer bootstrap: set PUBLIC_HOST + DNS records + docker compose up.
For production TLS, configure Traefik ACME (Let's Encrypt).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-05 18:14:25 +02:00
2026-04-04 17:26:22 +02:00
Description
Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.
8.2 MiB
Languages
Java 47.4%
TypeScript 23.4%
Shell 16.5%
PowerShell 11.3%
Dockerfile 0.7%
Other 0.7%