uitls

Overview ¶

Package uitls generates the self-signed TLS certificate for the admin UI: baseline loopback SANs, all local interface IPs, the hostname, operator extras (CULVERT_PUBLIC_IP + --ui-san values passed in by the caller), and best-effort cloud public-IP detection via instance metadata. Extracted from package main per ADR-0002; the uiExtraSANs global stays in main (admin-settings persistence + the ui_extras startup slice own it) and is passed to SelfSigned as a parameter.