From 111d4b1b8c510842c77f42670d17edea9a652ea7 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Fri, 14 Aug 2026 14:33:59 -0400
Subject: [PATCH] Make sure certs are created when creating and updating
 private resources

---
 server/routers/siteResource/createSiteResource.ts |  2 +-
 server/routers/siteResource/updateSiteResource.ts | 12 ++++++++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/server/routers/siteResource/createSiteResource.ts b/server/routers/siteResource/createSiteResource.ts
index 5887aae52..f3794d35a 100644
--- a/server/routers/siteResource/createSiteResource.ts
+++ b/server/routers/siteResource/createSiteResource.ts
@@ -769,7 +769,7 @@ export async function createSiteResource(
 
         if (
             ssl &&
-            mode === "http" &&
+            (mode === "http" || mode == "inference") &&
             domainId &&
             fullDomain &&
             build != "oss"
diff --git a/server/routers/siteResource/updateSiteResource.ts b/server/routers/siteResource/updateSiteResource.ts
index e0740e8c7..2e57b13a7 100644
--- a/server/routers/siteResource/updateSiteResource.ts
+++ b/server/routers/siteResource/updateSiteResource.ts
@@ -30,6 +30,8 @@ import createHttpError from "http-errors";
 import { z } from "zod";
 import { fromError } from "zod-validation-error";
 import { clearSiteResourceAiConfig } from "@server/lib/aiInferenceResource";
+import { build } from "@server/build";
+import { createCertificate } from "../certificates/createCertificate";
 
 const updateSiteResourceParamsSchema = z.strictObject({
     siteResourceId: z.coerce.number().int().positive()
@@ -735,6 +737,16 @@ export async function updateSiteResource(
 
         const finalUpdatedSiteResource = updatedSiteResource;
 
+        if (
+            ssl &&
+            (mode === "http" || mode == "inference") &&
+            domainId &&
+            fullDomain &&
+            build != "oss"
+        ) {
+            await createCertificate(domainId, fullDomain, db);
+        }
+
         rebuildClientAssociationsFromSiteResource(finalUpdatedSiteResource)
             .then(() =>
                 waitForSiteResourceRebuildIdle(