---
created: 2026-03-12
source: Rivet
tags: [agent-archive, rivet]
---

# Domain + Nginx + SSL Setup

**Purpose:** Replace Tailscale Funnel with a proper domain, nginx reverse proxy, and Let's Encrypt SSL.

## Current State
- Tailscale Funnel: `https://ubuntu-s-2vcpu-4gb-syd1-01.tail4060f2.ts.net`
- Used for: Twilio voice webhooks, potential WhatsApp webhooks
- Problem: Long URL, dependent on Tailscale service

## Target State
- Domain: `rivet.rateright.com.au` → `134.199.153.159`
- SSL: Let's Encrypt certificate (auto-renewing)
- Proxy: nginx → localhost:3334 (Clawdbot gateway webhook port)

## DNS Record Required (Michael must add)

| Type | Name | Value | TTL |
|------|------|-------|-----|
| A | rivet | 134.199.153.159 | 300 |

**DNS Provider:** GoDaddy (ns57/ns58.domaincontrol.com)

**Steps in GoDaddy:**
1. Go to [GoDaddy DNS Management](https://dcc.godaddy.com/domains)
2. Select `rateright.com.au`
3. Click "DNS" or "Manage DNS"
4. Add record:
   - Type: A
   - Name: rivet
   - Value: 134.199.153.159
   - TTL: 600 (10 min)
5. Save

## Files Created
- `/etc/nginx/sites-available/rivet.rateright.com.au` — nginx config
- `/home/ccuser/rateright-growth/rivet/setup/nginx-ssl/complete-setup.sh` — script to finish after DNS

## After DNS is Added

1. Verify DNS propagation:
   ```bash
   dig rivet.rateright.com.au +short
   # Should return: 134.199.153.159
   ```

2. Run the completion script:
   ```bash
   sudo /home/ccuser/rateright-growth/rivet/setup/nginx-ssl/complete-setup.sh
   ```

3. Update Clawdbot config with new webhook URL

## What the Setup Does

1. Enables the nginx site config
2. Obtains SSL certificate from Let's Encrypt
3. Tests nginx and reloads
4. Updates Clawdbot publicUrl to `https://rivet.rateright.com.au`
5. Restarts Clawdbot gateway

---

*Created: 2026-02-05 by Rivet*