mirror of
https://github.com/netbirdio/netbird.git
synced 2026-04-16 15:26:40 +00:00
1. When AddDomain() is called (when proxy receives a new mapping), it now spawns a goroutine to prefetch the certificate 2. prefetchCertificate() creates a synthetic tls.ClientHelloInfo and calls GetCertificate() to trigger the ACME flow 3. The certificate is cached by autocert.DirCache, so subsequent real requests will use the cached cert 4. If the cert is already cached (e.g., proxy restart), GetCertificate just returns it without making ACME requests