#######
### NGINX server configuration
### Drop all connections that do not match configured servers
#######

# Drop connections over HTTP by default
server {
    listen 80 default_server;
    listen [::]:80 default_server;

    # have nginx silently drop the connection
    return 444;
}

# Drop connections over HTTPS by default
# This could only happen after user proceeds past certificate mismatch warning
# or if using a wildcard certificate where obviously not all possible hosts
# could be configured.
# Respond with default certificates then drop connection
server {
    listen 443 default_server ssl http2;
    listen [::]:443 default_server ssl http2;

    # SSL certificates for this server
    include /etc/nginx/snippets/ssl/ssl_certs.conf;

    # have nginx silently drop the connection
    return 444;
}