From 63099703a180e170d720e35ab2796d76086992fe Mon Sep 17 00:00:00 2001
From: cclohmar <claus.lohmar@lohmar.co.uk>
Date: Tue, 7 Jul 2026 14:44:13 +0100
Subject: [PATCH] fix: stop Zoraxy before running tool to free port 80 for ACME

---
 deploy.sh | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index f4b2079..1cd519e 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -56,15 +56,18 @@ fi
 # --- Greenfield path ---
 if [ "$GREENFIELD" = true ]; then
 
-    # Step 3: Stop service and wipe
-    echo "[3/6] Stopping service and cleaning production directory..."
+    # Step 3: Stop all services and free port 80 for ACME challenge
+    echo "[3/6] Stopping all services..."
     systemctl stop $SERVICE_NAME 2>/dev/null || true
+    podman rm -f zoraxy 2>/dev/null || true
+
+    # Wipe production directory
     if [ -d "$TARGET_DIR" ]; then
         chattr -R -i "$TARGET_DIR" 2>/dev/null || true
         rm -rf "$TARGET_DIR"
     fi
 
-    # Step 4: Run helper tool — checks /opt/backup/certs/, issues LE if missing
+    # Step 4: Run helper tool — port 80 is free, can obtain LE certs via HTTP-01
     echo "[4/6] Checking certificates..."
     mkdir -p "$BACKUP_DIR/certs"
     if [ -f "$TOOL_BIN" ]; then