Drop requests that don't match the login property
If the user has specified a DNS name for a login property, this
change ensures that the host header matches before passing the
request on to the application.
@@ -259,6 +259,11 @@ map $scheme $ssl {
https on;
}
+server {
+ listen #{http_port} default_server;
+ return 444;
+}
+
server {
listen #{http_port};
server_name #{server_name};
@@ -292,6 +297,15 @@ server {
}
}
+server {
+ listen #{https_port} default_server;
+ ssl on;
+ ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # don't use SSLv3 ref: POODLE
+ ssl_certificate #{NGINX_PATH}/mycert.pem;
+ ssl_certificate_key #{NGINX_PATH}/mykey.pem;
+ return 444;
+}
+
server {
listen #{https_port};
server_name #{server_name};
