A small, working PHP script: a drop-in maintenance switch that shows a friendly branded page with a 503 status and Retry-After header to visitors, while letting your own IP address or a secret cookie bypass it. Includes a README with install steps and security notes, and was linted and smoke-tested on PHP 8.3.