From 8b7e19334a1bf006090a8cd2893e84bc848e0e52 Mon Sep 17 00:00:00 2001
From: Rob Kelly <contact@robkel.ly>
Date: Sat, 20 Dec 2025 17:23:26 -0700
Subject: [PATCH] SSL for duncgibbs atproto

---
 nginx/intrusive | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/nginx/intrusive b/nginx/intrusive
index 93ed852..17e261c 100644
--- a/nginx/intrusive
+++ b/nginx/intrusive
@@ -43,6 +43,18 @@ server {
     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
 }
 
+server {
+    server_name duncgibbs.intrusive.games;
+    root /var/www/intrusive-atproto/duncgibbs;
+
+    # atproto requires SSL
+    listen 443 ssl;
+    ssl_certificate /etc/letsencrypt/live/duncgibbs.intrusive.games/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/duncgibbs.intrusive.games/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+}
+
 server {
     if ($host = intrusive.games) {
         return 301 https://$host$request_uri;