Add guarded IP certificate flow and renewal history

backend/internal/nginxconfig/nginxconfig_test.go

@@ -111,15 +111,16 @@ func TestRenderHTTPCustomPort(t *testing.T) {
 	}
 }
 
-func TestRenderHTTPIPv4AndRejectHTTPSIPv4(t *testing.T) {
+func TestRenderIPv4HTTPAndHTTPS(t *testing.T) {
 	opts := RenderOptions{Domain: "121.4.111.208", Scheme: "http", Port: 28080}
 	site, httpsSite, err := RenderWithOptions(opts, nil, 0)
 	if err != nil || httpsSite != "" || !strings.Contains(site, "listen 28080;") || !strings.Contains(site, "server_name 121.4.111.208;") {
 		t.Fatalf("HTTP IPv4 rendering failed: %v, %q, %q", err, site, httpsSite)
 	}
 	opts.Scheme = "https"
-	if _, _, err := RenderWithOptions(opts, nil, 0); err == nil {
-		t.Fatal("HTTPS IPv4 must be rejected")
+	httpSite, httpsSite, err := RenderWithOptions(opts, nil, 0)
+	if err != nil || !strings.Contains(httpSite, "server_name 121.4.111.208;") || !strings.Contains(httpsSite, "listen 28080 ssl;") {
+		t.Fatalf("HTTPS IPv4 rendering failed: %v", err)
 	}
 }