add default server block to drop unknown host headers

2026-03-20 16:12:06 -04:00
parent 3a1ef3a167
commit 163aefddee
2 changed files with 48 additions and 0 deletions
@@ -0,0 +1,19 @@
+# Drop connections with unknown Host headers
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    server_name _;
+    return 444;
+}
+
+server {
+    listen 443 ssl default_server;
+    listen [::]:443 ssl default_server;
+    http2 on;
+    server_name _;
+
+    ssl_certificate     /etc/letsencrypt/live/hantim.net/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/hantim.net/privkey.pem;
+
+    return 444;
+}