add golive-http-only.sh fallback: serve clean HTTP (drop 301->https) until SSL SNI fix lands

9a64fc92fbe414d1802f5263bdc31777081d3159 · 2026-08-13 13:27:21 -0700 · Steve Abrams

Files touched

A golive-http-only.sh

Diff

commit 9a64fc92fbe414d1802f5263bdc31777081d3159
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Aug 13 13:27:21 2026 -0700

    add golive-http-only.sh fallback: serve clean HTTP (drop 301->https) until SSL SNI fix lands
---
 golive-http-only.sh | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/golive-http-only.sh b/golive-http-only.sh
new file mode 100644
index 0000000..2957518
--- /dev/null
+++ b/golive-http-only.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+# FALLBACK: un-break agency.agentabrams.com by serving clean HTTP (no 301->https,
+# no :443) until the SSL SNI fix is applied. Single conf.d file, nginx -t gated.
+# Run from Mac2:  bash ~/Projects/abramsagency/golive-http-only.sh
+set -euo pipefail
+SRV=root@45.61.58.125
+HOST=agency.agentabrams.com
+PORT=9788
+ssh -o StrictHostKeyChecking=accept-new "$SRV" "cat > /etc/nginx/conf.d/$HOST.conf <<NG
+server {
+  listen 80;
+  server_name $HOST;
+  location ^~ /.well-known/acme-challenge/ { root /var/www/certbot; default_type \"text/plain\"; try_files \\\$uri =404; }
+  location / {
+    proxy_pass http://127.0.0.1:$PORT;
+    proxy_set_header Host \\\$host;
+    proxy_set_header X-Forwarded-For \\\$proxy_add_x_forwarded_for;
+  }
+}
+NG
+nginx -t && systemctl reload nginx && echo HTTP_ONLY_RESTORED"
+echo "== check =="
+curl -s -m 12 -H "Host: $HOST" http://45.61.58.125/ -o /dev/null -w "http via vhost=%{http_code}\n" || true

← 55142be add golive-ssl-fix.sh: raise server_names_hash_bucket_size s · back to Abramsagency · golive-ssl-fix: raise server_names_hash_MAX_SIZE to 8192 (re c1a6837 →