Skip to content

Fix TLS cert path for buywhere.ai apex domain [BUY-12781]#50

Open
BuyWhere wants to merge 7 commits into
mainfrom
bolt/buy-12781-tls-cert-fix
Open

Fix TLS cert path for buywhere.ai apex domain [BUY-12781]#50
BuyWhere wants to merge 7 commits into
mainfrom
bolt/buy-12781-tls-cert-fix

Conversation

@BuyWhere

@BuyWhere BuyWhere commented May 6, 2026

Copy link
Copy Markdown
Owner

BUY-12781: Fix TLS cert path for buywhere.ai apex domain

Correct ssl_certificate paths in deploy/nginx/buywhere.ai.conf to use buywhere.ai/fullchain.pem instead of api.buywhere.ai/fullchain.pem.

Problem: buywhere.ai was serving the api.buywhere.ai TLS certificate.
Fix: Point 443 vhost to the correct apex cert.

Acceptance: curl https://buywhere.ai/ returns 200 without -k flag.

Flux (VP Backend) and others added 7 commits May 6, 2026 11:51
fix(mcp): restore direct tool dispatch and product lookups
- Add GET /.well-known/api-catalog route to wellknown.ts/dist — returns catalog manifest for UptimeRobot monitor
- Add GET /health/redis route to server.ts/dist — checks Redis connectivity and returns status
- Both endpoints were previously 404, causing UptimeRobot false positive DOWN alerts

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Cart (Agent Success Lead)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
…xpress API on port 3000

Nginx update: add upstream express_api (port 3000) and location blocks for the
two UptimeRobot monitor endpoints. Routes from Express API (deployed separately)
are now reachable via api.buywhere.ai.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
…t 8000

Repoint api.buywhere.ai to the verified Cloud Run runtime
(buywhere-api-3cjo6zft4q-as.a.run.app) which has the correct
auth store wiring. The old VM-local Express app on port 8000
returns release:"dev" and does not authenticate against the
current buywhere-db-url.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Correct ssl_certificate paths in deploy/nginx/buywhere.ai.conf to use
buywhere.ai/fullchain.pem instead of api.buywhere.ai/fullchain.pem.

BUY-12781: buywhere.ai was serving api.buywhere.ai certificate.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
@BuyWhere BuyWhere force-pushed the main branch 10 times, most recently from 334809d to c7d0e11 Compare May 9, 2026 05:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant