# Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## 1.0.0 - 2026-06-28

### Added

- Added a POSIX-compliant dynTLS management script for issuing, checking, removing and updating TLS certificates.
- Added the commands `init-pki`, `add-cert`, `check-cert`, `remove-cert` and `update-cert`.
- Added PKI initialization helpers for certificate, key, token and local root certificate directory setup.
- Added configurable ACME backend integration through `DYNTLS_LE_PROGRAM`.
- Added support for HTTP-01 and DNS-01 challenge workflows through external ACME helper scripts.
- Added certificate deployment mapping through `DYNTLS_DOMAINSERVICE_LIST` for service-specific target paths, ownership, permissions and restart or reload actions.
- Added support for multi-domain certificate sets through `DYNTLS_DOMAIN_LIST`.
- Added pre- and post-execution command hooks through `DYNTLS_CMD_PRE_LIST` and `DYNTLS_CMD_POST_LIST`.
- Added structured logging with log levels, timestamps and per-domain-set identifiers.
- Added temporary file handling, cleanup routines and command parameter validation.
- Added example configuration in `vars.example` for PKI paths, ACME settings, DNS settings, logging, domain sets, service mappings and backup retention.

### Changed

- Separated certificate issuance logic from ACME protocol handling by delegating ACME communication to an external client script.
- Standardized runtime configuration around environment variables and a dedicated `vars` file workflow.
- Organized certificate management around reusable PKI directory and service deployment patterns suitable for self-hosted multi-service environments.

### Fixed

- Improved operational safety through stricter directory, file and environment validation before certificate operations are executed.
- Improved cleanup behavior by removing temporary session data automatically on exit and restoring terminal state.