feat(health-check): add TLS verification option to health check configuration

Introduced a new `verify_tls` boolean option in health check configurations across various services, allowing users to specify whether to validate TLS certificates during health checks. Updated related components and services to accommodate this new option, ensuring proper handling in both the backend and frontend. Enhanced tests to validate the new functionality and ensure correct behavior with different configurations.

apps/api/test/health-check.test.ts

@@ -55,6 +55,7 @@ describe("health-check probeTarget", () => {
       path: null,
       expected_status: null,
       timeout_ms: 1000,
+      verify_tls: false,
     };
     const result = await healthCheckService.probeTarget(target);
     expect(result.ok).toBe(true);
@@ -73,6 +74,7 @@ describe("health-check probeTarget", () => {
       path: null,
       expected_status: null,
       timeout_ms: 500,
+      verify_tls: false,
     };
     const result = await healthCheckService.probeTarget(target);
     expect(result.ok).toBe(false);
@@ -104,6 +106,7 @@ describe("health-check probeTarget", () => {
         path: "/",
         expected_status: 200,
         timeout_ms: 1000,
+        verify_tls: false,
       };
       const bindingTarget: HealthCheckTarget = {
         ...groupTarget,
@@ -138,6 +141,7 @@ describe("health-check probeTarget", () => {
       path: null,
       expected_status: null,
       timeout_ms: 3000,
+      verify_tls: false,
     };
     const binding: HealthCheckTarget = {
       ...group,
@@ -204,4 +208,27 @@ describe("health-check state derivation via runAllChecks", () => {
     );
     expect(status?.status).toBe("down");
   });
+
+  it("listHealthCheckTargets includes verify_tls from binding config", async () => {
+    const { createMemoryDb, repos, runMigrations } = await import("@cfdm/db");
+    const { db, sqlite } = createMemoryDb();
+    runMigrations(sqlite);
+
+    const domain = repos.createDomain(db, null, "example.com", "zone-id");
+    const service = repos.createService(db, "Svc", "svc");
+    const binding = repos.insertBinding(db, domain.id, service.id, "@", null);
+    repos.updateBindingLbConfig(db, binding.id, {
+      health_check_enabled: true,
+      health_check_type: "http",
+      health_check_port: 443,
+      health_check_verify_tls: true,
+    });
+    repos.replaceBindingIpsWithMeta(db, binding.id, [
+      { ip: "10.0.0.1", weight: 1, priority: 1 },
+    ]);
+
+    const targets = repos.listHealthCheckTargets(db);
+    expect(targets).toHaveLength(1);
+    expect(targets[0]?.verify_tls).toBe(true);
+  });
 });