work around unreliable ssl_reject_handshake

2023-03-06 10:56:54 -05:00 · 2023-03-06 10:56:54 -05:00 · 31e0ab3807
commit 31e0ab3807
parent fc3890cc91
1 changed files with 6 additions and 0 deletions
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@ -148,6 +148,12 @@ http {
        listen 443 default_server ssl backlog=4096;
        listen [::]:443 default_server ssl backlog=4096;
        ssl_reject_handshake on;
+
+        # work around unreliable ssl_reject_handshake
+        keepalive_timeout 0;
+        location / {
+            return 404;
+        }
    }

    server {