Add an ssl no-default example
I.e. an example of this: -> curl -kI -H "Host: valid.com" https://localhost HTTP/1.1 200 OK ... -> curl -kI -H "Host: invalid.com" https://localhost curl: (52) Empty reply from server Whether this works or not depends on SNI.
This commit is contained in:
parent
6be3c46535
commit
7a0e282dd0
|
@ -0,0 +1,12 @@
|
||||||
|
# Drop requests for unknown hosts
|
||||||
|
#
|
||||||
|
# If no default server is defined, nginx will use the first found server.
|
||||||
|
# To prevent host header attacks, or other potential problems when an unknown
|
||||||
|
# servername is used in a request, it's recommended to drop the request
|
||||||
|
# returning 444 "no response".
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl default_server;
|
||||||
|
include h5bp/direcitve-only/ssl.conf
|
||||||
|
return 444;
|
||||||
|
}
|
Loading…
Reference in New Issue