v31.1

core-routes.md

@@ -153,7 +153,7 @@ This file lists the current HTTP routes exposed by Core, grouped by access level
 | `POST` | `/admin/nodes/:id/routing-balancers` | `CreateNodeRoutingBalancerDto` | Creates a routing balancer |
 | `PATCH` | `/admin/nodes/:id/routing-balancers/:balancerId` | `UpdateNodeRoutingBalancerDto` | Updates a routing balancer |
 | `DELETE` | `/admin/nodes/:id/routing-balancers/:balancerId` | none | Deletes a routing balancer |
-| `PUT` | `/admin/nodes/:id/nginx/site` | multipart form-data | Uploads cert/key/html for a masking site |
+| `PUT` | `/admin/nodes/:id/nginx/site` | multipart form-data (`domain`, `certificateMode`, `email?`, `keyType?` = `ecdsa`\|`rsa`, `cert?`/`key?`/`html?`) | Uploads cert/key/html or auto-issues a masking-site cert (`keyType=rsa` → RSA-4096 for ML-DSA-65 self-mask) |
 | `GET` | `/admin/nodes/:id/nginx/site` | none | Returns nginx masking site status |
 | `GET` | `/admin/nodes/:id/nginx/sites/:domain/certificate` | none | Returns certificate and domain validity info |
 | `DELETE` | `/admin/nodes/:id/nginx/sites/:domain` | none | Deletes a masking site |

node.md

@@ -130,7 +130,7 @@ All other routes require `x-node-auth-key`.
 | `GET` | `/node/nginx/sites` | List masking sites. |
 | `GET` | `/node/nginx/sites/:domain` | Get one masking site. |
 | `GET` | `/node/nginx/sites/:domain/certificate` | Get certificate and domain validity info. |
-| `PUT` | `/node/nginx/sites` | Upsert one domain masking site (TLS upload or auto-issuance). |
+| `PUT` | `/node/nginx/sites` | Upsert one domain masking site (TLS upload or ACME auto-issuance; `keyType=ecdsa`\|`rsa`, RSA-4096 for ML-DSA-65 self-mask). |
 | `PUT` | `/node/nginx/site` | Upsert legacy default masking site. |
 | `GET` | `/node/nginx/site` | Get current masking site status. |
 | `DELETE` | `/node/nginx/sites/:domain` | Delete one masking site. |