v1 readiness: correctness fixes, edge hardening, auto-TLS, load balancing, ops#35

Merged

mirkobrombin merged 11 commits into

mainfrom

feature/v1-readiness

Jul 17, 2026

Commits on Jul 16, 2026

fix: terminate plugin children on exit, fix gzip 304, add admin timeouts and stop writer leak
mirkobrombin
committed
feat: real config validation, strict unknown-field parsing and version command
mirkobrombin
committed
feat: add rate limiting, IP allow/deny, body limit, CORS, security headers, HSTS, force-https and cache-control
mirkobrombin
committed
feat: SIGHUP config reload and log retention purge
mirkobrombin
committed
chore: harden CI, add systemd unit, Dockerfile, production docs and changelog
mirkobrombin
committed
feat: automatic TLS via ACME/Let's Encrypt
mirkobrombin
committed
feat: reverse-proxy load balancing with health checks and failover
mirkobrombin
committed
docs: document auto-TLS, load balancing and edge features in README
mirkobrombin
committed
test: cover config validation and edge middleware
mirkobrombin
committed
ci: silence SA6002 for mandatory []byte BufferPool implementations
mirkobrombin
committed
ci: suppress unavoidable SA6002 inline instead of globally
mirkobrombin
committed