Survives reboots and power cuts
After a kernel update at 04:00 or a power cut, every site serves HTTPS again — with nothing to type. A native systemd service, a proxy that boots from its last-known-good config, and certificates that persist.
- blog.example.com200 OK
- shop.example.com200 OK
- wiki.example.com200 OK