infrastructure

commit 506b9bfaf7fac0cf0d8e79d2403e1a79af77cbfb
parent 97644ac36db16b1fc6e361cb78a0fab02ad15490
Author: Silas Brack <silasbrack@gmail.com>
Date:   Fri,  3 Apr 2026 20:57:30 +0200

fix: add catchall in nginx

Diffstat:
M
nixos/configuration-debian-2gb-hel1-1.nix
 | 
9
+++++++++

1 file changed, 9 insertions(+), 0 deletions(-)
diff --git a/nixos/configuration-debian-2gb-hel1-1.nix b/nixos/configuration-debian-2gb-hel1-1.nix
@@ -134,6 +134,15 @@
     limit_req_status 429;
   '';
 
+  # Catch-all for unknown hostnames
+  services.nginx.virtualHosts."_" = {
+    default = true;
+    rejectSSL = true;
+    locations."/" = {
+      return = "444";
+    };
+  };
+
   # MediaWiki
   services.mediawiki = {
     enable = true;