There is something wrong with the certificate of your agent:
[2021-03-20 13:14:54 +0100] information/JsonRpcConnection: Received certificate request for CN 'production-1.infra.qop.cz' not signed by our CA: self signed certificate (code 18)
[2021-03-20 13:14:54 +0100] warning/JsonRpcConnection: Ticket '9f8dc806d47a57a15644b045581ef234d6ce7b66' for CN 'production-1.infra.qop.cz' is invalid.
[2021-03-20 13:14:54 +0100] information/JsonRpcConnection: Received certificate request for CN 'production-1.infra.qop' not signed by our CA: self signed certificate (code 18)
[2021-03-20 13:14:54 +0100] warning/JsonRpcConnection: Ticket 'c2da64017a52398849c24f4ac016d0171c9d4358' for CN 'production-1.infra.qop' is invalid.
Some minutes lates if looks ok tough:
[2021-03-20 13:17:20 +0100] information/JsonRpcConnection: The certificate for CN 'production-1.infra.qop.cz' is valid and uptodate. Skipping automated renewal.
It looks like you didn’t create a host object in the director:
[2021-03-20 13:17:20 +0100] information/ApiListener: New client connection for identity 'production-1.infra.qop.cz' from [192.168.1.103]:47718 (no Endpoint object found for identity)
This looks strange to me:
[2021-03-20 13:18:04 +0100] information/ApiListener: Finished syncing endpoint 'icinga-1.infra.qop' in zone 'master'.
Is icinga-1.infra.qop really an endpoint in your master zone?