What's Changed
Automatic TLS certificate hot-reloading
ColdBrew now automatically watches TLS cert/key files for changes and reloads them without requiring a service restart. This is powered by cloudflare/certinel using fsnotify for event-driven file watching.
- Zero-downtime certificate rotation for Kubernetes (cert-manager, Vault)
- Works with symlink-based rotation out of the box
- Watcher errors trigger graceful shutdown so the process can be restarted by the orchestrator
Full Changelog: v0.1.51...v0.1.52