From c82d81e018d280f5087197931e03ec94289f1e5b Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Tue, 7 Mar 2023 10:32:32 -0500
Subject: [PATCH] ssl_reject_handshake is working as intended

---
 nginx/nginx.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 65e874f6..890dff3a 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -149,8 +149,9 @@ http {
         listen [::]:443 default_server ssl backlog=4096;
         ssl_reject_handshake on;
 
-        # work around unreliable ssl_reject_handshake
         keepalive_timeout 0;
+
+        # https://trac.nginx.org/nginx/ticket/2012
         location / {
             return 404;
         }