luke/ansible-roles/nginx/files, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-08-10T14:37:37Z nginx: add catch-all default_server returning 404 for unmatched hosts 2026-08-10T14:37:37Z Luke Hoersten luke@hoersten.org 2026-08-10T14:36:28Z urn:sha1:3610744c6a2324cbffeb49bd2e8a2b7c58a2e9e6 Without an explicit default_server, nginx falls back to the first alphabetically-loaded vhost for any request whose Host or SNI matches no server_name. Add an explicit catch-all that returns a plain 404 over HTTP and rejects the TLS handshake (ssl_reject_handshake, nginx >= 1.19.4) so unmatched HTTPS requests are not served a mismatched cert. Fixed paper build URL and nginx logging off. 2026-03-27T19:56:43Z Luke Hoersten luke@hoersten.org 2026-03-27T19:56:43Z urn:sha1:0e8a85cd7c3a4ee1de23ffd78cc49b727382acae Update versions and fix nginx logging. 2026-03-26T02:42:49Z Luke Hoersten luke@hoersten.org 2026-03-26T02:42:49Z urn:sha1:58d4444b06de49587417791bb06a4fe1aeda571d Added stream support to nginx configs. 2020-06-16T04:25:16Z Luke Hoersten luke@hoersten.org 2020-06-16T04:25:16Z urn:sha1:a10a0a3f06f514e4e7968b1b8db37342211979a7