mirror of
https://github.com/certbot/certbot.git
synced 2026-07-28 08:45:22 +02:00
20 lines
867 B
Plaintext
20 lines
867 B
Plaintext
# -*-mode: nginx; mode: flyspell-prog; mode: autopair; ispell-local-dictionary: "american" -*-
|
|
### Block all illegal host headers. Taken from a discussion on nginx
|
|
### forums. Cf. http://forum.nginx.org/read.php?2,3482,3518 following
|
|
### a suggestion by Maxim Dounin. Also suggested in
|
|
### http://nginx.org/en/docs/http/request_processing.html.
|
|
server {
|
|
listen [::]:80 default_server;
|
|
# Uncomment the line below and comment the above if you're
|
|
# running a Nginx version less than 0.8.20.
|
|
# listen [::]:80 default;
|
|
|
|
# Accept redirects based on the value of the Host header. If
|
|
# there's no valid vhost configuration file with a
|
|
# corresponding server_name directive then signal an error and
|
|
# fail silently. See:
|
|
# http://wiki.nginx.org/NginxHttpCoreModule#server_name_in_redirect
|
|
server_name_in_redirect off;
|
|
return 444;
|
|
}
|