From 12b547858570f1d192e0bfaf1430c6a1540ad222 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Mon, 6 Mar 2023 11:01:29 -0500
Subject: [PATCH] work around unreliable ssl_reject_handshake

---
 nginx/nginx.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index bfcd16b..f310e4b 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -123,6 +123,12 @@ http {
         listen 443 default_server ssl backlog=4096;
         listen [::]:443 default_server ssl backlog=4096;
         ssl_reject_handshake on;
+
+        # work around unreliable ssl_reject_handshake
+        keepalive_timeout 0;
+        location / {
+            return 404;
+        }
     }
 
     server {