TLS Certificates Settings UI

[DavidePrincipi]

The TLS Certificates page has an ACME servers view, where each node can be configured with a custom ACME server URL.

🐛 The current table column order should be swapped: node first, URL second.

🎯 Expose new similar features in that page. The resulting UI will support the configuration of:

• ACME server URL, as now
• ACME challenge type choice: (HTTP-01, TLS-ALPN-01). A third DNS-01 type is planned but still not implemented here, because it requires additional fields.
• Trusted Frontend proxy settings: a list of trusted proxy IPv4/v6 addresses and the trust depth (how many level of proxies are trusted, default 1).

Discussions:

• https://mattermost.nethesis.it/nethesis/pl/w95t1ufqztd1xqa1u8jtqgy9qo
• https://mattermost.nethesis.it/nethesis/pl/e9cjmdai93gtdcga5afhyjn3ko
• https://mattermost.nethesis.it/nethesis/pl/mh1q4mjtdfndxnfnqoigd6x5xc

[AmaLuci]

Mockups ready in Figma here

Changes included

• Replaced the previous navigation button with tabs:

  • Certificates
  • Settings

• Updated the settings table structure:

  • Node
  • ACME directory URL
  • Challenge type

• Added support in UI for selecting the ACME challenge type:

  • HTTP-01
  • TLS-ALPN-01

• Updated the edit modal:

  • improved terminology and labels
  • added Challenge type selection
  • aligned naming with the new Settings section

• Improved overall UX consistency and readability of the configuration flow

Notes

• DNS-01 support has intentionally been excluded from this iteration and will be added in a future implementation when backend support and additional configuration fields are available.
• Trusted proxy settings Frontend proxies (trusted proxy IPv4/v6 addresses + trust depth) will instead be added under HTTP routes. Mockups for that section are still in progress.

[AmaLuci]

Implemented UI support for Trusted Proxy settings in HTTP routes configuration.

Changes included

• Added a new Trusted proxy Frontend proxies subsection under HTTP routes

• Introduced a dedicated empty state for frontend proxy configuration

• Added Add trusted proxy Add frontend proxy action opening a dedicated configuration modal

• Designed the new modal with:

  • node selection
  • trusted proxy IPv4/IPv6/CIDR addresses
  • trust depth configuration (default: 1)

• Improved Advanced route settings terminology:

Mockups ready in Figma here