From 7dc15c1f592e775f561f81ed15b735c9e1a167a3 Mon Sep 17 00:00:00 2001
From: Remco <1+remco@noreply.gitlabi@epicnabbo.nl>
Date: Sat, 18 Jul 2026 18:53:03 +0200
Subject: [PATCH] revert 8292cc8ffb929a92981106ea1a174dece1457c06

revert fix(infra): serve full TLS chain for epicnabbo.nl to resolve Cloudflare 525

Traefik's ACME resolver stored the epicnabbo.nl leaf certificate without
the Let's Encrypt intermediate. With Cloudflare in Full (strict) mode the
origin TLS handshake failed (HTTP 525), breaking every asset and the whole
site layout (JS/CSS chunks, Nitro client, toolbar).

Configure the epicnabbo router to use a file-based certificate that
includes the full chain (leaf + LE YR2 intermediate), referenced from
dynamic/epicnabbo-tls.yml. Add a regeneration script and README.