new changes

YakPanel-server/frontend/src/pages/DomainsPage.tsx

@@ -25,6 +25,10 @@ interface SslDiagnostics {
   nginx_effective_listen_443: boolean
   panel_vhost_path_in_nginx_t: boolean
   nginx_t_probe_errors: string[]
+  /** Something accepted TCP when connecting to 127.0.0.1:443 from the panel process */
+  localhost_443_accepts_tcp: boolean
+  /** ss/netstat reported :443 in listen table, or null if probe unavailable */
+  ss_reports_443_listen: boolean | null
   hints: string[]
 }
 
@@ -114,6 +118,32 @@ export function DomainsPage() {
           ) : null}
           <div className="text-secondary mb-1">Include YakPanel vhosts inside the <code>http</code> block of the nginx process that serves your sites:</div>
           <code className="d-block user-select-all bg-body-secondary p-2 rounded small text-break">{diag.include_snippet}</code>
+          <div className="mt-3 small">
+            <strong>Port 443 on this machine</strong>
+            <ul className="mb-0 ps-3 mt-1">
+              <li>
+                Localhost TCP (127.0.0.1:443):{' '}
+                {diag.localhost_443_accepts_tcp ? (
+                  <span className="text-success">accepting connections</span>
+                ) : (
+                  <span className="text-danger">refused / nothing listening</span>
+                )}
+              </li>
+              <li>
+                Kernel listen table (ss):{' '}
+                {diag.ss_reports_443_listen === null ? (
+                  <span className="text-secondary">not checked</span>
+                ) : diag.ss_reports_443_listen ? (
+                  <span className="text-success">443 in LISTEN</span>
+                ) : (
+                  <span className="text-danger">no 443 in LISTEN</span>
+                )}
+              </li>
+            </ul>
+            <p className="text-secondary mt-2 mb-0">
+              The panel cannot see your cloud provider firewall. If localhost shows open but browsers off-network fail, open TCP 443 in the VPS control panel (security group) and OS firewall.
+            </p>
+          </div>
           {diag.vhosts.length > 0 ? (
             <div className="mt-2 text-secondary">
               Panel configs scanned:{' '}