# TCP stream configuration for Havoc C2
stream {
    # TCP forwarding for Havoc Teamserver
    server {
        listen {{ havoc_teamserver_port | default(40056) }};
        proxy_pass {{ c2_ip }}:{{ havoc_teamserver_port | default(40056) }};
    }
    
    # Additional Havoc ports
    server {
        listen {{ havoc_http_port | default(8080) }};
        proxy_pass {{ c2_ip }}:{{ havoc_http_port | default(8080) }};
    }
    
    # HTTPS for Havoc - Using a different port to avoid conflicts with web server
    server {
        # Changed from default 443 to 9443 to avoid conflict with Nginx HTTPS
        listen {{ havoc_https_port | default(9443) }};
        # Still proxy to the C2's HTTPS port
        proxy_pass {{ c2_ip }}:{{ havoc_https_port | default(443) }};
    }
}