Server Block Nginx Default: /etc/nginx/sites-available/default

default

##
# Default Catch-All HTTP Server
##

server {
    listen 80 default_server;
    server_name _;

    return 444;
}


##
# Default Catch-All HTTPS Server
# HTTP/2 and HTTP/3 enabled (modern syntax)
##

server {
    # TCP listener (TLS)
    listen 443 ssl default_server;

    # Enable HTTP/2 (new syntax)
    http2 on;

    # QUIC listener (UDP) for HTTP/3
    #listen 443 quic reuseport default_server;

    server_name _;

    ssl_protocols TLSv1.2 TLSv1.3;

    # Reject TLS handshake before certificate exchange
    ssl_reject_handshake on;
}

nginx version: nginx/1.26.3