server-configs-nginx/sites-available/ssl.no-default

15 lines
469 B
Plaintext

# Drop requests for unknown hosts
#
# If no default server is defined, nginx will use the first found server.
# To prevent host header attacks, or other potential problems when an unknown
# servername is used in a request, it's recommended to drop the request
# returning 444 "no response".
server {
listen [::]:443 ssl default_server;
listen 443 ssl default_server;
include h5bp/ssl/ssl_engine.conf;
include h5bp/ssl/policy_intermediate.conf;
return 444;
}