From 31e0ab3807bbaaf234a474e39c5f0dc494fbe759 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Mon, 6 Mar 2023 10:56:54 -0500 Subject: [PATCH] work around unreliable ssl_reject_handshake --- nginx/nginx.conf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 85b3a31c..65e874f6 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -148,6 +148,12 @@ http { listen 443 default_server ssl backlog=4096; listen [::]:443 default_server ssl backlog=4096; ssl_reject_handshake on; + + # work around unreliable ssl_reject_handshake + keepalive_timeout 0; + location / { + return 404; + } } server {