sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(nginx): add dummy host that matches unrecognized server_names

Browse source
This commit is contained in:
oddlama 2023-07-02 12:14:52 +02:00
parent 01668ddee6
commit 73ab856da9
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
modules/meta/nginx.nix
View file

@ -71,6 +71,16 @@ in {
access_log syslog:server=unix:/dev/log,nohostname json_combined;
ssl_ecdh_curve secp384r1;
'';
# Default host that rejects everything.
# This is selected when no matching host is found for a request.
virtualHosts.dummy = {
listenAddresses = ["127.0.0.1" "[::1]"];
default = true;
locations."/".extraConfig = ''
deny all;
'';
};
};
networking.firewall.allowedTCPPorts = [80 443];