From 3f26f7186771b871eaff4c5b11b5419f5a99377e Mon Sep 17 00:00:00 2001
From: LavaDesu <me@lava.moe>
Date: Thu, 17 Feb 2022 09:54:46 +0700
Subject: [PATCH] services/nginx: return 444 on unknown domains

---
 modules/services/nginx.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/modules/services/nginx.nix b/modules/services/nginx.nix
index efd2e4f..3218b9f 100644
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@@ -14,6 +14,16 @@
         forceSSL = true;
         root = inputs.website.outPath;
       };
+      "_" = {
+        default = true;
+        addSSL = true;
+        # TODO generate this somewhere
+        sslCertificate = "/persist/fakeCerts/fake.crt";
+        sslCertificateKey = "/persist/fakeCerts/fake.key";
+        extraConfig = ''
+          return 444;
+        '';
+      };
     };
   };
 }