diff --git a/nginx/intrusive b/nginx/intrusive
index 93ed852..17e261c 100644
--- a/nginx/intrusive
+++ b/nginx/intrusive
@@ -43,6 +43,18 @@ server {
     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
 }
 
+server {
+    server_name duncgibbs.intrusive.games;
+    root /var/www/intrusive-atproto/duncgibbs;
+
+    # atproto requires SSL
+    listen 443 ssl;
+    ssl_certificate /etc/letsencrypt/live/duncgibbs.intrusive.games/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/duncgibbs.intrusive.games/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+}
+
 server {
     if ($host = intrusive.games) {
         return 301 https://$host$request_uri;