From a67ce8e38ed327461af4d4a8893bd21737499c48 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Stephan=20D=C3=BCsterhaupt?= Date: Sun, 28 Jun 2026 09:42:49 +0200 Subject: [PATCH] Add initial CHANGELOG.md --- CHANGELOG.md | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 CHANGELOG.md diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 0000000..abb7ae8 --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,33 @@ +# Changelog + +All notable changes to this project will be documented in this file. + +The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), +and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). + +## 1.0.0 - 2026-06-28 + +### Added + +- Added a POSIX-compliant dynTLS management script for issuing, checking, removing and updating TLS certificates. +- Added the commands `init-pki`, `add-cert`, `check-cert`, `remove-cert` and `update-cert`. +- Added PKI initialization helpers for certificate, key, token and local root certificate directory setup. +- Added configurable ACME backend integration through `DYNTLS_LE_PROGRAM`. +- Added support for HTTP-01 and DNS-01 challenge workflows through external ACME helper scripts. +- Added certificate deployment mapping through `DYNTLS_DOMAINSERVICE_LIST` for service-specific target paths, ownership, permissions and restart or reload actions. +- Added support for multi-domain certificate sets through `DYNTLS_DOMAIN_LIST`. +- Added pre- and post-execution command hooks through `DYNTLS_CMD_PRE_LIST` and `DYNTLS_CMD_POST_LIST`. +- Added structured logging with log levels, timestamps and per-domain-set identifiers. +- Added temporary file handling, cleanup routines and command parameter validation. +- Added example configuration in `vars.example` for PKI paths, ACME settings, DNS settings, logging, domain sets, service mappings and backup retention. + +### Changed + +- Separated certificate issuance logic from ACME protocol handling by delegating ACME communication to an external client script. +- Standardized runtime configuration around environment variables and a dedicated `vars` file workflow. +- Organized certificate management around reusable PKI directory and service deployment patterns suitable for self-hosted multi-service environments. + +### Fixed + +- Improved operational safety through stricter directory, file and environment validation before certificate operations are executed. +- Improved cleanup behavior by removing temporary session data automatically on exit and restoring terminal state.