350eeb4f76
Stale certificate entries (mattermost/zar/registry.tielogic.xyz) in Traefik's acme.json triggered repeated NXDOMAIN renewal errors. Script atomically stops Traefik, backs up acme.json, filters out the listed domains with JSON validation + auto-rollback, restores 600 root:adriano perms, and restarts. Domain list is extensible via the STALE array. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>