Nginx: disable direct access on IP

disable_access_on_ip

# Disable direct access on ip
# generate stub ssl cert
# sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/stub-selfsigned.key -out /etc/ssl/certs/stub-selfsigned.crt


server {
	listen x.x.x.x:80 default_server;

	listen x.x.x.x:443 default_server;
	ssl_certificate "/etc/ssl/certs/stub-selfsigned.crt";
	ssl_certificate_key "/etc/ssl/private/stub-selfsigned.key";

	server_name "";

	return 444;
}

# server {
# 	listen 80 default_server;
# 	listen [::]:80 default_server;
#
# 	listen 443 default_server;
# 	listen [::]:443 default_server;
# 	ssl_certificate "/etc/ssl/certs/stub-selfsigned.crt";
# 	ssl_certificate_key "/etc/ssl/private/stub-selfsigned.key";
#
# 	server_name "";
#
# 	return 444;
# }