Add server block to reject requests without host header

Moody-Tunes · Jun 18, 2021 · c30e01d · c30e01d
1 parent 2391140
commit c30e01d
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/roles/nginx/templates/mtdj/nginx.j2 b/roles/nginx/templates/mtdj/nginx.j2
@@ -2,6 +2,14 @@ upstream app_server {
     server 127.0.0.1:{{ wsgi_server_port }};
 }
 
+server {
+    listen 443 default_server ssl;
+    server_name _ "" default_server;
+    access_log /var/log/nginx/access.log access;
+
+    return 444;
+}
+
 server {
     listen 443 ssl http2;
     server_name {{ app_hostname }} admin.{{ app_hostname }};