From a22707770f70f5feac4e57ef4d278cd055e8f5ea Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Wed, 25 Feb 2026 21:12:44 +0100
Subject: [PATCH] feat: update certificates logic: - Switched xdfnx's homepage
 certificates to traefik-managed mode - Renamed local fallback certs

---
 homepages/compose.yaml  | 1 +
 traefik/dynamic/tls.yml | 6 ++----
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/homepages/compose.yaml b/homepages/compose.yaml
index 8d22a57..16b6906 100644
--- a/homepages/compose.yaml
+++ b/homepages/compose.yaml
@@ -42,6 +42,7 @@ services:
       # Prod Router
       - "traefik.http.routers.xdfnx.rule=Host(`xdfnx.cfd`)"
       - "traefik.http.routers.xdfnx.entrypoints=websecure"
+      - "traefik.http.routers.xdfnx.tls.certresolver=letsencrypt" 
       - "traefik.http.routers.xdfnx.tls=true"
       # Local Router
       - "traefik.http.routers.xdfnx-local.rule=Host(`xdfnx.workstation.internal`)"
diff --git a/traefik/dynamic/tls.yml b/traefik/dynamic/tls.yml
index 666c3f0..5925e33 100644
--- a/traefik/dynamic/tls.yml
+++ b/traefik/dynamic/tls.yml
@@ -4,14 +4,12 @@ tls:
     # Cloudflare Origin CA *.forust.xyz
     # - certFile: /certs/cloudflare.pem
     #   keyFile: /certs/cloudflare.key
-    - certFile: /certs/xdfnx.pem
-      keyFile: /certs/xdfnx.key
   stores:
     default:
       defaultCertificate:
         # Fallback local certificate
-        certFile: /certs/gigaforust.internal+1.pem
-        keyFile: /certs/gigaforust.internal+1-key.pem
+        certFile: /certs/local.pem
+        keyFile: /certs/local-key.pem
 
   options:
     default: