Relegate lighttpd to only webserver work; replace Lighttpd proxy with HAproxy SNI
Rather than doing proxy config and SSL termination in the webserver, we can use HAProxy to hand the connection all the way down to application. This will let us move off a wildcard certificate and rebuild our certbot automation.
Deleting a branch is permanent. It CANNOT be undone. Continue?