Jaculabilis
/
nixos-configs
1
1
Fork 0
Code Releases Activity

empyrean: fix HTTPS for nonexistent subdomains 

nginx always chooses a server block for a connection and the listen parameters are checked before server name. This meant that HTTPS connections missed the default 444 server block because it only matched HTTP. With this, those requests now get an SSL error.
This commit is contained in:
Jaculabilis 2024-01-12 18:21:44 +00:00
parent c9242c0bea
commit 46c6157fab
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
machine/empyrean/default.nix
View File

@ -75,6 +75,7 @@
# Deny all other subdomains # Deny all other subdomains
"alogoulogoi.com" = { "alogoulogoi.com" = {
default = true; default = true;
rejectSSL = true;
locations."/".return = "444"; locations."/".return = "444";
}; };
}; };