Nginx

测试 Nginx 配置文件是否有效，

sudo nginx -t

重新加载 Nginx 配置文件，

sudo nginx -s reload

禁止通过 IP 访问网站

如下配置需要通过 openssl 生成 ssl certificate，命令如下

sudo openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout default.key -out default.crt -subj '/CN='

通过 IP 访问80 或者 443 端口会收到 Connection #0 to host xx.xx.xx.xx left intact.

server {
    # 默认的 server
    listen 80 default_server;
    listen [::]:80 default_server;
    # 匹配空的$HOST
    server_name _;

    # everything is 444
    location / {
        return 444; # close the connection without sending a response
    }
}

server {
    listen 443 ssl default_server;
    listen [::]:443 ssl  default_server;
    ssl_certificate /etc/nginx/ssl/default.crt;
    ssl_certificate_key /etc/nginx/ssl/default.key;
    server_name  _;
    location / {
        return 444;
    }
}