alexion/dotfiles
Archived
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(reverse-proxy): reject unmatched HTTPS hosts

Browse Source
This commit was merged in pull request #50.
This commit is contained in:
alexion
2026-08-17 15:49:11 -04:00
parent c50e996851
commit 4677dbe591
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
modules/reverse-proxy.nix
View File

@@ -72,6 +72,13 @@ in
services.nginx = { services.nginx = {
enable = true; enable = true;
commonHttpConfig = ''
server {
listen 0.0.0.0:443 ssl default_server;
listen [::0]:443 ssl default_server;
ssl_reject_handshake on;
}
'';
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedProxySettings = true; recommendedProxySettings = true;