diff --git a/caddy/caddy/atp.caddy b/caddy/caddy/atp.caddy
index 0148f7d..0b7131b 100644
--- a/caddy/caddy/atp.caddy
+++ b/caddy/caddy/atp.caddy
@@ -47,49 +47,6 @@
 	reverse_proxy {$ADDR_PDS}
 }
 
-*.{$PDS_HOST:abnormal.zip},
-*.at.{$DONG_HOST:dongs.zip} {
-	import log pds
-	tls {
-		on_demand
-	}
-
-	redir / https://aturi.to/{host}
-	handle_path /aturi/* { 
-		redir https://aturi.to/at://{host}{uri} 
-	}
-
-	redir /bsky https://bsky.app/profile/{host}
-	redir /witchsky https://witchsky.app/profile/{host}
-	redir /anisota https://anisota.net/profile/{host}
-
-	handle_path /bsky/* { 
-		redir https://bsky.app/profile/{host}/post{uri} 
-	}
-	handle_path /witchsky/* { 
-		redir https://witchsky.app/profile/{host}/post{uri} 
-	}
-	handle_path /anisota/* { 
-		redir https://anisota.net/profile/{host}/post{uri} 
-	}
-	
-	redir /pdsls https://pdsls.dev/at://{host}
-	redir /tangled https://tangled.org/{host}
-	
-	handle_path /pdsls/* { 
-		redir https://pdsls.dev/at://{host}{uri} 
-	}
-	handle_path /tangled/* { 
-		redir https://tangled.org/{host}{uri} 
-	}
-	
-	redir /leaflet https://leaflet.pub/p/{host}
-	redir /semble https://semble.so/profile/{host}
-	redir /blento https://blento.app/{host}
-
-	reverse_proxy /.well-known/atproto-did {$ADDR_PDS}
-}
-
 ### tangled knot
 # (see nginx.conf for ssh proxying)
 knot.{$HOST:vielle.dev} {
@@ -143,4 +100,48 @@ cimd.{$HOST:vielle.dev} {
 	}
 
 	redir http://localhost:3000{uri}
+}
+
+### handles
+*.{$PDS_HOST:abnormal.zip},
+*.at.{$DONG_HOST:dongs.zip} {
+	import log pds
+	tls {
+		on_demand
+	}
+
+	redir / https://aturi.to/{host}
+	handle_path /aturi/* { 
+		redir https://aturi.to/at://{host}{uri} 
+	}
+
+	redir /bsky https://bsky.app/profile/{host}
+	redir /witchsky https://witchsky.app/profile/{host}
+	redir /anisota https://anisota.net/profile/{host}
+
+	handle_path /bsky/* { 
+		redir https://bsky.app/profile/{host}/post{uri} 
+	}
+	handle_path /witchsky/* { 
+		redir https://witchsky.app/profile/{host}/post{uri} 
+	}
+	handle_path /anisota/* { 
+		redir https://anisota.net/profile/{host}/post{uri} 
+	}
+	
+	redir /pdsls https://pdsls.dev/at://{host}
+	redir /tangled https://tangled.org/{host}
+	
+	handle_path /pdsls/* { 
+		redir https://pdsls.dev/at://{host}{uri} 
+	}
+	handle_path /tangled/* { 
+		redir https://tangled.org/{host}{uri} 
+	}
+	
+	redir /leaflet https://leaflet.pub/p/{host}
+	redir /semble https://semble.so/profile/{host}
+	redir /blento https://blento.app/{host}
+
+	reverse_proxy /.well-known/atproto-did {$ADDR_PDS}
 }
\ No newline at end of file