fixed fallback behavior

2026-03-24 08:39:42 -04:00 · 2026-03-12 04:59:23 -04:00 · 2026-03-12 04:59:23 -04:00 · 2f34d995df
commit 2f34d995df
parent 52bea0cbeb
1 changed files with 10 additions and 0 deletions
--- a/src/system/modules/nginx/default.nix
+++ b/src/system/modules/nginx/default.nix
@ -35,6 +35,16 @@ in
      recommendedGzipSettings = true;
      eventsConfig = "worker_connections 4096;";

+      # Catch-all default - reject unknown hosts instead of falling back
+      virtualHosts."_" = {
+        default = true;
+        useACMEHost = domain;
+        forceSSL = true;
+        locations."/" = {
+          return = "444";  # Close connection without response
+        };
+      };
+
      virtualHosts."test.${domain}" = {
        useACMEHost = domain;
        forceSSL = true;