From f668066a67440270dc6622ee27580e151054e4b8 Mon Sep 17 00:00:00 2001
From: baldnerd <robbie@category5.tv>
Date: Sat, 9 May 2026 11:58:26 -0400
Subject: [PATCH] Add :443 decoy

---
 installer.sh | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/installer.sh b/installer.sh
index 287a649..1680aec 100755
--- a/installer.sh
+++ b/installer.sh
@@ -1223,6 +1223,7 @@ write_nginx_decoy() {
 server {
     listen 80 default_server;
     listen [::]:80 default_server;
+
     root ${APP_ROOT}/app/decoy;
     index index.php index.html;
 
@@ -1237,6 +1238,28 @@ server {
         fastcgi_pass unix:${PHP_FPM_SOCK};
     }
 }
+
+server {
+    listen 443 ssl default_server;
+    listen [::]:443 ssl default_server;
+
+    root ${APP_ROOT}/app/decoy;
+    index index.php index.html;
+
+    server_tokens off;
+
+    ssl_certificate ${SSL_DIR}/baldcanary.crt;
+    ssl_certificate_key ${SSL_DIR}/baldcanary.key;
+
+    location / {
+        try_files \$uri /index.php\$is_args\$args;
+    }
+
+    location ~ \.php$ {
+        include snippets/fastcgi-php.conf;
+        fastcgi_pass unix:${PHP_FPM_SOCK};
+    }
+}
 EOF
 
   rm -f "$NGINX_SITES_ENABLED/default"