Thore CimbalandClaude Opus 4.8
e09ab508af
Cert renewal switched to DNS-01 (IONOS): test issuance validated end-to-end (LE YR1, valid to 2026-11-12), the shared letsencrypt resolver now renews rohana/selendis via DNS-01, so the September renewal needs no open port 443. Syncs the canonical file with the already-closed git.lab tracker issue 7. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>