diff --git a/examples/crash_reporter/backend/nginx/rssh-bastion-stream.conf.example b/examples/crash_reporter/backend/nginx/rssh-bastion-stream.conf.example
index c7453e8..5e5e4ae 100644
--- a/examples/crash_reporter/backend/nginx/rssh-bastion-stream.conf.example
+++ b/examples/crash_reporter/backend/nginx/rssh-bastion-stream.conf.example
@@ -1,6 +1,10 @@
 # FE nginx stream — TCP proxy to BE sshd for RSSH bastion (ra.apps.f0xx.org:443).
 # Install on FE (Gentoo); BE runs openssh with Match User ra-* (see sshd_config.d/ra.conf).
 #
+# *** DO NOT install under BE /etc/nginx/stream.d/ ***
+# BE already uses listen 443 ssl in conf.d/apps.conf (http). Stream listen 443 here
+# causes: nginx: [emerg] bind() to 0.0.0.0:443 failed (98: Address in use)
+#
 # Include from nginx.conf:
 #   include /etc/nginx/stream.d/rssh-bastion.conf;