From 8ef581bc35f1f04707b87047a8c8cea72c0426dd Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Mon, 19 Oct 2026 13:28:50 +0000 Subject: [PATCH] root-ubuntu.sh: the apex userdirs block is the 443 default_server No 443 block was marked default, so the first Moshpit origin added on dev3 (moshpit-host.sh demo.indie) took over no-SNI/unmatched-host traffic with its self-signed certificate. Already applied by hand on dev3. Co-Authored-By: Claude Opus 5.5 --- root-ubuntu.sh | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/root-ubuntu.sh b/root-ubuntu.sh index 5725512..1efe336 100755 --- a/root-ubuntu.sh +++ b/root-ubuntu.sh @@ -6900,7 +6900,9 @@ $ssl } server { -$listen +${listen//ssl;/ssl default_server;} + # The default for 443: without one, the next vhost nginx loads (a Moshpit name's + # origin block, say) answers no-SNI and unmatched hosts with its own certificate. server_name $WEB_DOMAIN; $ssl root /var/www/userdirs;