Certificate renewal path
Keeping certificate challenge files in a stable webroot makes renewals easier to monitor and avoids coupling public routes to temporary validation files.
Notes
Keeping certificate challenge files in a stable webroot makes renewals easier to monitor and avoids coupling public routes to temporary validation files.
A static site has a narrow failure surface. It loads quickly, works without a build step, and can be checked with ordinary HTTP tools.
Useful checks stay boring: DNS answers, TLS certificates, service status, listening sockets, log growth, and a direct request from outside the host.