restart-nginx.sh
#!/usr/bin/env bash # Force a clean nginx restart (rebuilds server_names_hash) + verify agency cert. set -euo pipefail SRV=root@45.61.58.125 ssh -o StrictHostKeyChecking=accept-new "$SRV" 'systemctl restart nginx && sleep 1 && echo "== cert now served for agency SNI ==" && echo | openssl s_client -servername agency.agentabrams.com -connect 127.0.0.1:443 2>/dev/null | openssl x509 -noout -subject'