[object Object]

← back to New Engine

Save prod nginx vhost (IP-specific listen 45.61.58.125:80/443 + LE SSL + /var/www/html ACME webroot)

da6a9275017c81262206a556ac6554af92669945 · 2026-07-28 13:19:01 -0700 · Steve Abrams

The IP-specific listen is required — wildcard 'listen 80' loses to the fleet's
'listen 45.61.58.125:80' blocks for external traffic, which was breaking cert issuance.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

Diff

commit da6a9275017c81262206a556ac6554af92669945
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue Jul 28 13:19:01 2026 -0700

    Save prod nginx vhost (IP-specific listen 45.61.58.125:80/443 + LE SSL + /var/www/html ACME webroot)
    
    The IP-specific listen is required — wildcard 'listen 80' loses to the fleet's
    'listen 45.61.58.125:80' blocks for external traffic, which was breaking cert issuance.
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .../nginx.new.engine.designerwallcoverings.com.conf | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/deploy/nginx.new.engine.designerwallcoverings.com.conf b/deploy/nginx.new.engine.designerwallcoverings.com.conf
new file mode 100644
index 0000000..11e038c
--- /dev/null
+++ b/deploy/nginx.new.engine.designerwallcoverings.com.conf
@@ -0,0 +1,21 @@
+server {
+    listen 45.61.58.125:80;
+    server_name new.engine.designerwallcoverings.com;
+    location /.well-known/acme-challenge/ { root /var/www/html; }
+    location / { return 301 https://$host$request_uri; }
+}
+server {
+    listen 45.61.58.125:443 ssl http2;
+    server_name new.engine.designerwallcoverings.com;
+    ssl_certificate /etc/letsencrypt/live/new.engine.designerwallcoverings.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/new.engine.designerwallcoverings.com/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+    location / {
+        proxy_pass http://127.0.0.1:9870;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}

← c6f56d6 Repoint engine to port 9870 (9840 taken on Kamatera)  ·  back to New Engine  ·  Add search + vendor filter, sort, since-date filter, and den 6df1adf →