From 139b0ed3765f7d44f6a894b6eba133eea22611b8 Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Tue, 7 Mar 2023 10:36:12 -0500
Subject: [PATCH] ssl_reject_handshake is working as intended

---
 nginx/nginx.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index f310e4b..b471316 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -124,8 +124,9 @@ http {
         listen [::]:443 default_server ssl backlog=4096;
         ssl_reject_handshake on;
 
-        # work around unreliable ssl_reject_handshake
         keepalive_timeout 0;
+
+        # https://trac.nginx.org/nginx/ticket/2012
         location / {
             return 404;
         }