From cf4a1e5ec754b50cfade86217774d861f6552959 Mon Sep 17 00:00:00 2001
From: Nathan Chapman <nathan@windmillapps.org>
Date: Fri, 14 Jul 2023 23:04:41 -0600
Subject: [PATCH] Add host name check in nginx conf

---
 nginx/prod.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nginx/prod.conf b/nginx/prod.conf
index fbd942b..d04f0d8 100644
--- a/nginx/prod.conf
+++ b/nginx/prod.conf
@@ -19,6 +19,10 @@ server {
     listen [::]:443 ssl http2;
     server_name ptcoffee.com www.ptcoffee.com;
 
+    if ($http_host !~* ^(ptcoffee.com|www.ptcoffee.com)$ ) {
+        return 444;
+    }
+
     # SSL
     ssl_certificate /etc/letsencrypt/live/ptcoffee.com/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/ptcoffee.com/privkey.pem;