feat: first fully successful run e2e on straper

8 files changed, 109 insertions, 0 deletions

diff --git a/straper/db/public/tls/cert-expiry.txt b/straper/db/public/tls/cert-expiry.txt
new file mode 100644
index 0000000..e3be004
--- /dev/null
+++ b/straper/db/public/tls/cert-expiry.txt
@@ -0,0 +1,7 @@
+# TLS certificate expiry — 2026-03-20T16:27:47
+# domain                                    not_before                    not_after                     days_left
+
+chat.labunix.xyz                            Mar 17 08:02:59 2026 GMT      Jun 15 08:02:58 2026 GMT      86
+labunix.xyz                                 Mar 17 08:06:41 2026 GMT      Jun 15 08:06:40 2026 GMT      86
+pad.labunix.xyz                             Mar 17 08:09:35 2026 GMT      Jun 15 08:09:34 2026 GMT      86
+voice.labunix.xyz                           Mar 17 08:10:20 2026 GMT      Jun 15 08:10:19 2026 GMT      86
diff --git a/straper/db/public/tls/certbot-certificates.txt b/straper/db/public/tls/certbot-certificates.txt
new file mode 100644
index 0000000..af5fa76
--- /dev/null
+++ b/straper/db/public/tls/certbot-certificates.txt
@@ -0,0 +1,33 @@
+Saving debug log to /var/log/letsencrypt/letsencrypt.log
+
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+Found the following certs:
+  Certificate Name: chat.labunix.xyz
+    Serial Number: 51c9aa098aadeaaf0715e337d0f56ecead8
+    Key Type: ECDSA
+    Domains: chat.labunix.xyz
+    Expiry Date: 2026-06-15 08:02:58+00:00 (VALID: 86 days)
+    Certificate Path: /etc/letsencrypt/live/chat.labunix.xyz/fullchain.pem
+    Private Key Path: /etc/letsencrypt/live/chat.labunix.xyz/privkey.pem
+  Certificate Name: labunix.xyz
+    Serial Number: 577cac1ddd7171ee4abc5c64ed067af6580
+    Key Type: ECDSA
+    Domains: labunix.xyz *.labunix.xyz
+    Expiry Date: 2026-06-15 08:06:40+00:00 (VALID: 86 days)
+    Certificate Path: /etc/letsencrypt/live/labunix.xyz/fullchain.pem
+    Private Key Path: /etc/letsencrypt/live/labunix.xyz/privkey.pem
+  Certificate Name: pad.labunix.xyz
+    Serial Number: 6fd3f255d57acaa91b48a22de15c02fc5ca
+    Key Type: ECDSA
+    Domains: pad.labunix.xyz pad-sandbox.labunix.xyz
+    Expiry Date: 2026-06-15 08:09:34+00:00 (VALID: 86 days)
+    Certificate Path: /etc/letsencrypt/live/pad.labunix.xyz/fullchain.pem
+    Private Key Path: /etc/letsencrypt/live/pad.labunix.xyz/privkey.pem
+  Certificate Name: voice.labunix.xyz
+    Serial Number: 66b176690b044490fe2ff0bf9f91b03867b
+    Key Type: ECDSA
+    Domains: voice.labunix.xyz
+    Expiry Date: 2026-06-15 08:10:19+00:00 (VALID: 86 days)
+    Certificate Path: /etc/letsencrypt/live/voice.labunix.xyz/fullchain.pem
+    Private Key Path: /etc/letsencrypt/live/voice.labunix.xyz/privkey.pem
+- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
diff --git a/straper/db/public/tls/certbot-version.txt b/straper/db/public/tls/certbot-version.txt
new file mode 100644
index 0000000..b653564
--- /dev/null
+++ b/straper/db/public/tls/certbot-version.txt
@@ -0,0 +1 @@
+certbot 4.0.0
diff --git a/straper/db/public/tls/cli.ini b/straper/db/public/tls/cli.ini
new file mode 100644
index 0000000..d69c7f2
--- /dev/null
+++ b/straper/db/public/tls/cli.ini
@@ -0,0 +1,5 @@
+# Because we are using logrotate for greater flexibility, disable the
+# internal certbot logrotation.
+max-log-backups = 0
+# Adjust interactive output regarding automated renewal
+preconfigured-renewal = True
diff --git a/straper/db/public/tls/renewal-configs/chat.labunix.xyz.conf b/straper/db/public/tls/renewal-configs/chat.labunix.xyz.conf
new file mode 100644
index 0000000..d072bb5
--- /dev/null
+++ b/straper/db/public/tls/renewal-configs/chat.labunix.xyz.conf
@@ -0,0 +1,16 @@
+# renew_before_expiry = 30 days
+version = 4.0.0
+archive_dir = /etc/letsencrypt/archive/chat.labunix.xyz
+cert = /etc/letsencrypt/live/chat.labunix.xyz/cert.pem
+privkey = /etc/letsencrypt/live/chat.labunix.xyz/privkey.pem
+chain = /etc/letsencrypt/live/chat.labunix.xyz/chain.pem
+fullchain = /etc/letsencrypt/live/chat.labunix.xyz/fullchain.pem
+
+# Options used in the renewal process
+[renewalparams]
+account = a1413eee8d5f0cd07eadb7e29d2cc032
+authenticator = dns-cloudflare
+server = https://acme-v02.api.letsencrypt.org/directory
+key_type = ecdsa
+dns_cloudflare_credentials = /etc/letsencrypt/cloudflare/credentials.ini
+dns_cloudflare_propagation_seconds = 30
diff --git a/straper/db/public/tls/renewal-configs/labunix.xyz.conf b/straper/db/public/tls/renewal-configs/labunix.xyz.conf
new file mode 100644
index 0000000..35f572e
--- /dev/null
+++ b/straper/db/public/tls/renewal-configs/labunix.xyz.conf
@@ -0,0 +1,15 @@
+# renew_before_expiry = 30 days
+version = 4.0.0
+archive_dir = /etc/letsencrypt/archive/labunix.xyz
+cert = /etc/letsencrypt/live/labunix.xyz/cert.pem
+privkey = /etc/letsencrypt/live/labunix.xyz/privkey.pem
+chain = /etc/letsencrypt/live/labunix.xyz/chain.pem
+fullchain = /etc/letsencrypt/live/labunix.xyz/fullchain.pem
+
+# Options used in the renewal process
+[renewalparams]
+account = a1413eee8d5f0cd07eadb7e29d2cc032
+authenticator = dns-cloudflare
+server = https://acme-v02.api.letsencrypt.org/directory
+key_type = ecdsa
+dns_cloudflare_credentials = /etc/letsencrypt/cloudflare/credentials.ini
diff --git a/straper/db/public/tls/renewal-configs/pad.labunix.xyz.conf b/straper/db/public/tls/renewal-configs/pad.labunix.xyz.conf
new file mode 100644
index 0000000..84a7960
--- /dev/null
+++ b/straper/db/public/tls/renewal-configs/pad.labunix.xyz.conf
@@ -0,0 +1,16 @@
+# renew_before_expiry = 30 days
+version = 4.0.0
+archive_dir = /etc/letsencrypt/archive/pad.labunix.xyz
+cert = /etc/letsencrypt/live/pad.labunix.xyz/cert.pem
+privkey = /etc/letsencrypt/live/pad.labunix.xyz/privkey.pem
+chain = /etc/letsencrypt/live/pad.labunix.xyz/chain.pem
+fullchain = /etc/letsencrypt/live/pad.labunix.xyz/fullchain.pem
+
+# Options used in the renewal process
+[renewalparams]
+account = a1413eee8d5f0cd07eadb7e29d2cc032
+authenticator = dns-cloudflare
+server = https://acme-v02.api.letsencrypt.org/directory
+key_type = ecdsa
+dns_cloudflare_propagation_seconds = 30
+dns_cloudflare_credentials = /etc/letsencrypt/cloudflare/credentials.ini
diff --git a/straper/db/public/tls/renewal-configs/voice.labunix.xyz.conf b/straper/db/public/tls/renewal-configs/voice.labunix.xyz.conf
new file mode 100644
index 0000000..d20498c
--- /dev/null
+++ b/straper/db/public/tls/renewal-configs/voice.labunix.xyz.conf
@@ -0,0 +1,16 @@
+# renew_before_expiry = 30 days
+version = 4.0.0
+archive_dir = /etc/letsencrypt/archive/voice.labunix.xyz
+cert = /etc/letsencrypt/live/voice.labunix.xyz/cert.pem
+privkey = /etc/letsencrypt/live/voice.labunix.xyz/privkey.pem
+chain = /etc/letsencrypt/live/voice.labunix.xyz/chain.pem
+fullchain = /etc/letsencrypt/live/voice.labunix.xyz/fullchain.pem
+
+# Options used in the renewal process
+[renewalparams]
+account = a1413eee8d5f0cd07eadb7e29d2cc032
+authenticator = dns-cloudflare
+server = https://acme-v02.api.letsencrypt.org/directory
+key_type = ecdsa
+dns_cloudflare_propagation_seconds = 30
+dns_cloudflare_credentials = /etc/letsencrypt/cloudflare/credentials.ini