deploy: add http-only bootstrap vhost for certbot chicken-and-egg

8d71624cc5f4b085ffa8308545048b2f6ad3e009 · 2026-09-09 12:04:46 -0700 · Steve Abrams

Files touched

A deploy/nginx-petitionyour.org.http.conf

Diff

commit 8d71624cc5f4b085ffa8308545048b2f6ad3e009
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Wed Sep 9 12:04:46 2026 -0700

    deploy: add http-only bootstrap vhost for certbot chicken-and-egg
---
 deploy/nginx-petitionyour.org.http.conf | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/deploy/nginx-petitionyour.org.http.conf b/deploy/nginx-petitionyour.org.http.conf
new file mode 100644
index 0000000..ef7f785
--- /dev/null
+++ b/deploy/nginx-petitionyour.org.http.conf
@@ -0,0 +1,19 @@
+# petitionyour.org — HTTP-ONLY bootstrap vhost.
+# Installed FIRST so :80 answers petitionyour.org for certbot's HTTP-01 challenge.
+# certbot --nginx then injects the :443 ssl block (mirroring petitionyour.com, which
+# on this box gets both `listen 443 ssl` AND `listen 45.61.58.125:443 ssl` — the
+# IP-bound line is what keeps it from being shadowed by the wildcard :443 default_server).
+server {
+    listen 80;
+    listen 45.61.58.125:80;
+    server_name petitionyour.org www.petitionyour.org;
+
+    location / {
+        proxy_pass http://127.0.0.1:9730;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}

← 4abdcb4 Initial build: Petition Your Representatives MVP · back to Petitionyour · Add real ZIP-to-congressmen contact flow (senators exact, Ho 78892be →