fix: remove ACME cert scanning to eliminate caddy-data permission issue (#88)

Caddy's certmagic creates storage dirs with hardcoded 0700 permissions,
making the web container's supplementary group membership ineffective.
Rather than working around this with ACLs or chmod hacks, remove the
feature entirely — it was cosmetic (issuer/expiry display) for certs
that Caddy auto-manages anyway.

Also bump access list dropdown timeout from 5s to 10s to fix flaky E2E test.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
fuomag9
2026-04-03 12:34:18 +02:00
parent 49b869f0ca
commit b9a88c4330
8 changed files with 9 additions and 144 deletions
-4
View File
@@ -101,10 +101,6 @@ OAUTH_ALLOW_AUTO_LINKING=false # Auto-link OAuth to accounts without pas
# Certificate storage directory (usually no need to change)
# CERTS_DIRECTORY=./data/certs
# Caddy certificate directory for ACME metadata scanning in the Certificates page
# (Only needed for custom/non-standard deployments)
# CADDY_CERTS_DIR=/caddy-data/caddy/certificates
# Login rate limiting (optional, for custom rate limit settings)
# LOGIN_MAX_ATTEMPTS=5
# LOGIN_WINDOW_MS=300000