From 31e0ab3807bbaaf234a474e39c5f0dc494fbe759 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Mon, 6 Mar 2023 10:56:54 -0500
Subject: [PATCH] work around unreliable ssl_reject_handshake

---
 nginx/nginx.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 85b3a31c..65e874f6 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -148,6 +148,12 @@ http {
         listen 443 default_server ssl backlog=4096;
         listen [::]:443 default_server ssl backlog=4096;
         ssl_reject_handshake on;
+
+        # work around unreliable ssl_reject_handshake
+        keepalive_timeout 0;
+        location / {
+            return 404;
+        }
     }
 
     server {