Wire up to start

server/private/certificates.ts

@@ -0,0 +1,17 @@
+/*
+ * This file is part of a proprietary work.
+ *
+ * Copyright (c) 2025-2026 Fossorial, Inc.
+ * All rights reserved.
+ *
+ * This file is licensed under the Fossorial Commercial License.
+ * You may not use this file except in compliance with the License.
+ * Unauthorized use, copying, modification, or distribution is strictly prohibited.
+ *
+ * This file is not licensed under the AGPLv3.
+ */
+
+export {
+    startCertificateManager,
+    stopCertificateManager
+} from "./lib/certificates";

server/private/cleanup.ts

@@ -21,6 +21,7 @@ import { stopPingAccumulator } from "@server/routers/newt/pingAccumulator";
 import { shutdownUsageRecorder } from "@server/lib/aiBudgetEnforcement";
 import { shutdownAiSessionLogger } from "@server/routers/aiGateway/logAiSession";
 import { stopDnsServer } from "./dns";
+import { stopCertificateManager } from "./certificates";
 
 async function cleanup() {
     await stopPingAccumulator();
@@ -33,6 +34,7 @@ async function cleanup() {
     await wsCleanup();
     await logStreamingManager.shutdown();
     await stopDnsServer();
+    await stopCertificateManager();
 
     process.exit(0);
 }

server/private/lib/certificates/index.ts

@@ -12,29 +12,25 @@
  */
 
 import logger from "@server/logger";
+import { privateConfig } from "#private/lib/config";
 import { acmeClientManager } from "./acme-client";
 import { jobScheduler } from "./scheduler";
 
-// Request a new certificate
-// await certificateService.addCertificateRequest(domain);
+export async function startCertificateManager() {
+    const acmeConfig = privateConfig.getRawPrivateConfig().acme;
+    if (!acmeConfig || acmeConfig.cert_mode !== "pangolin") {
+        return;
+    }
 
-logger.info("Starting certificate management server...");
+    logger.info("Starting certificate management server...");
 
-// Initialize ACME client
-await acmeClientManager.initialize();
+    // Initialize ACME client
+    await acmeClientManager.initialize();
 
-// Start job scheduler
-await jobScheduler.start();
+    // Start job scheduler
+    await jobScheduler.start();
+}
 
-// Graceful shutdown
-process.on("SIGTERM", async () => {
-    logger.info("Received SIGTERM, shutting down gracefully");
+export async function stopCertificateManager() {
     await jobScheduler.stop();
-    process.exit(0);
-});
-
-process.on("SIGINT", async () => {
-    logger.info("Received SIGINT, shutting down gracefully");
-    await jobScheduler.stop();
-    process.exit(0);
-});
+}