diff --git a/atproto/rpk/.well-known/atproto-did b/atproto/rpk/.well-known/atproto-did
new file mode 100644
index 0000000..a718449
--- /dev/null
+++ b/atproto/rpk/.well-known/atproto-did
@@ -0,0 +1 @@
+did:plc:e2rm6w3z73fq7473dzqbvykn
diff --git a/nginx/intrusive b/nginx/intrusive
index 947648a..c684a72 100644
--- a/nginx/intrusive
+++ b/nginx/intrusive
@@ -31,12 +31,23 @@ server {
 
 }
 
+server {
+    server_name rpk.intrusive.games;
+    root /ver/www/intrusive-atproto/rpk;
+
+    listen 443 ssl;
+    ssl_certificate /etc/letsencrypt/live/intrusive.games/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/intrusive.games/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+}
+
 server {
     if ($host = intrusive.games) {
         return 301 https://$host$request_uri;
     }
 
-    server_name intrusive.games www.intrusive.games;
+    server_name intrusive.games *.intrusive.games;
     listen 80;
     return 404;
 }