0.34.6_repo_cleanup

src/acme/jobs.rs

@@ -159,7 +159,6 @@ impl Manager {
                             "acme.not_due"
                         }
                         .into();
-                        // A dry run must not postpone a due production renewal.
                         if !dry_run {
                             entry.failures = 0;
                             entry.next_check = now + 43200 + (rand::random::<u16>() as i64 % 1800);
@@ -231,8 +230,6 @@ async fn deploy_renewal(
     .await
     .map_err(|_| "acme.validation_worker_failed".to_owned())?
     .map_err(|_| "acme.certificate_validation_failed".to_owned())?;
-    // CAS retries preserve edits to other parts of the document. A simultaneous
-    // change of this certificate wins over the worker; never silently overwrite it.
     for _ in 0..3 {
         let snapshot = state.config.load_full();
         let Some(current) = snapshot
@@ -280,16 +277,10 @@ async fn deploy_renewal(
     }
     Err("acme.configuration_changed".into())
 }
-/// One scheduler per process, sharing the issuance semaphore. It does not run
-/// its own shell hooks or stop listeners; validated snapshots rotate TCP and QUIC TLS.
 pub async fn renewal_loop(
     weak: std::sync::Weak<App>,
     shutdown: tokio_util::sync::CancellationToken,
 ) {
-    // Observations are restored from SQLite before listeners are exposed. If an
-    // older installation has no SQLite observations, the normal scheduler will
-    // safely reconstruct them on its first check; certificate/key state is not
-    // derived from historical observation sidecars.
     let delay = 300 + (rand::random::<u16>() as u64 % 300);
     tokio::select! { _ = shutdown.cancelled() => return, _ = tokio::time::sleep(Duration::from_secs(delay)) => {} }
     loop {