Block access requests that do not specify hostname (bots)

Cadasta · Jan 17, 2017 · 69935ee · 69935ee
1 parent 12e0ab1
commit 69935ee
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/provision/roles/webserver/production/templates/nginx-production b/provision/roles/webserver/production/templates/nginx-production
@@ -17,6 +17,11 @@ server {
 server {
     listen      443 ssl;
     server_name {{ api_url }};
+
+    if ($http_host != "{{ api_url }}") {
+        return 403;
+    }
+
     ssl_certificate     /etc/ssl/private/domain.crt;
     ssl_certificate_key /etc/ssl/private/domain.key;
 
@@ -61,6 +66,11 @@ server {
 server {
     listen      443 ssl;
     server_name {{ main_url }};
+
+    if ($http_host != "{{ main_url }}") {
+        return 403;
+    }
+
     ssl_certificate     /etc/ssl/private/domain.crt;
     ssl_certificate_key /etc/ssl/private/domain.key;