nginx-basic/availableSites/catch-all_dropConnection.conf

30 lines
819 B
Plaintext
Raw Normal View History

#######
### NGINX server configuration
### Drop all connections that do not match configured servers
#######
# Drop connections over HTTP by default
server {
listen 80 default_server;
listen [::]:80 default_server;
# have nginx silently drop the connection
return 444;
}
# Drop connections over HTTPS by default
# This could only happen after user proceeds past certificate mismatch warning
# or if using a wildcard certificate where obviously not all possible hosts
# could be configured.
# Respond with default certificates then drop connection
server {
listen 443 default_server ssl http2;
listen [::]:443 default_server ssl http2;
# SSL certificates for this server
include /etc/nginx/snippets/ssl/ssl_certs.conf;
# have nginx silently drop the connection
return 444;
}