portfolio GA4: stage 17 domains (DNS+certs+backends+nginx confs) — blocked on fabricut http2 reload gate

79e10172dae19e99440db0243231bf1f9ead9492 · 2026-08-20 16:08:45 -0700 · Steve Abrams
Files touched

A scripts/portfolio-ga4-nginx-stage.sh
Diff

commit 79e10172dae19e99440db0243231bf1f9ead9492
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Aug 20 16:08:45 2026 -0700

    portfolio GA4: stage 17 domains (DNS+certs+backends+nginx confs) — blocked on fabricut http2 reload gate
---
 scripts/portfolio-ga4-nginx-stage.sh | 59 ++++++++++++++++++++++++++++++++++++
 1 file changed, 59 insertions(+)

diff --git a/scripts/portfolio-ga4-nginx-stage.sh b/scripts/portfolio-ga4-nginx-stage.sh
new file mode 100644
index 0000000..16c4c10
--- /dev/null
+++ b/scripts/portfolio-ga4-nginx-stage.sh
@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+set -u
+IP="45.61.58.125"; WEBROOT="/var/www/certbot"
+TS=$(date +%s); mkdir -p /root/nginx-backups
+tar czf /root/nginx-backups/portfolio-ga4-pre-$TS.tgz /etc/nginx/sites-available /etc/nginx/sites-enabled 2>/dev/null
+echo "BACKUP /root/nginx-backups/portfolio-ga4-pre-$TS.tgz"
+
+# full 80+443 vhost. $1 confname $2 servernames $3 backendport $4 certname [$5 ga4-to-inject]
+vhost () {
+  local name="$1" names="$2" port="$3" cert="$4" ga="${5:-}"
+  local conf="/etc/nginx/sites-available/gap-${name}.conf"
+  {
+    echo "server {"
+    echo "    listen 80;"
+    echo "    server_name ${names};"
+    echo "    location ^~ /.well-known/acme-challenge/ { root ${WEBROOT}; default_type \"text/plain\"; }"
+    echo "    location / { return 301 https://\$host\$request_uri; }"
+    echo "}"
+    echo "server {"
+    echo "    listen ${IP}:443 ssl http2;"
+    echo "    server_name ${names};"
+    echo "    ssl_certificate /etc/letsencrypt/live/${cert}/fullchain.pem;"
+    echo "    ssl_certificate_key /etc/letsencrypt/live/${cert}/privkey.pem;"
+    echo "    ssl_protocols TLSv1.2 TLSv1.3;"
+    echo "    add_header X-Content-Type-Options \"nosniff\" always;"
+    echo "    location / {"
+    echo "        proxy_pass http://127.0.0.1:${port};"
+    if [ -n "$ga" ]; then
+      echo "        proxy_set_header Accept-Encoding \"\";"
+      echo "        sub_filter '</head>' '<script async src=\"https://www.googletagmanager.com/gtag/js?id=${ga}\"></script><script>window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}gtag(\"js\",new Date());gtag(\"config\",\"${ga}\");</script></head>';"
+      echo "        sub_filter_once on;"
+      echo "        sub_filter_types *;"
+    fi
+    echo "        proxy_http_version 1.1;"
+    echo "        proxy_set_header Host \$host;"
+    echo "        proxy_set_header X-Real-IP \$remote_addr;"
+    echo "        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;"
+    echo "        proxy_set_header X-Forwarded-Proto \$scheme;"
+    echo "        proxy_read_timeout 90s;"
+    echo "    }"
+    echo "}"
+  } > "$conf"
+  echo "WROTE(disabled) $conf -> :$port cert=$cert ${ga:+ga=$ga}"
+}
+
+# G1 plain landers (10) -> :9794 domain-landings app (renders per-Host GA itself, no sub_filter)
+for d in 67calc.com wallsondemand.com muralsondemand.com wallpaperondemand.com fabricsondemand.com dsgntv.com askgoodquestions.ai bubbeleh.ai hospitalitysalesrepresentatives.com wall-papers.org; do
+  vhost "$(echo $d | tr '.' '-')" "$d" 9794 gap-g1-plain ""
+done
+# G1 special cases
+vhost designerwallcoverings-ai "designerwallcoverings.ai www.designerwallcoverings.ai" 9794 gap-designerwallcoverings-ai ""
+vhost greendomainbrokers "greendomainbrokers.com www.greendomainbrokers.com" 9900 gap-greendomainbrokers "G-C8Q45N0QTF"
+# G2
+vhost commercialdesignreps "commercialdesignreps.com www.commercialdesignreps.com" 9923 gap-commercialdesignreps ""
+vhost designerrepresentatives "designerrepresentatives.com www.designerrepresentatives.com" 9633 gap-designerrepresentatives ""
+vhost designtradelive "designtradelive.com www.designtradelive.com" 9634 gap-designtradelive ""
+vhost wallsandfabrics "wallsandfabrics.com www.wallsandfabrics.com" 9635 gap-wallsandfabrics ""
+vhost iwascute "iwascute.com www.iwascute.com" 9636 gap-iwascute "G-2DHDBP8R78"
+echo "ALL_CONFS_STAGED_DISABLED"
← 5985c69 GA4 inject: 2026-08-20 re-verification — 6 live-verified, NE · back to Ga Allsites · auto-data-snapshot: 2026-08-21T01:18:32 (1 data files) — etl 3a1f985 →