From c630582dd1ee83fd9c3437685501832bb2de628d Mon Sep 17 00:00:00 2001
From: reidlab <reidlab325@gmail.com>
Date: Tue, 22 Aug 2023 02:49:15 -0700
Subject: [PATCH] add blackhole for invalid subdomains

---
 hosts/server/configuration.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/server/configuration.nix b/hosts/server/configuration.nix
index 2fd4f22..aecfa76 100755
--- a/hosts/server/configuration.nix
+++ b/hosts/server/configuration.nix
@@ -147,6 +147,9 @@
 
     # This might create errors
     proxy_cookie_path / "/; secure; HttpOnly; SameSite=strict";
+
+    # prevent invalid subdomains "invalid ssl certificate" error (blackhole)
+    virtualHosts."_".locations."/".return = "444";
   '';
   services.nginx.virtualHosts."reidlab.online" = {
     forceSSL = true;