# Closes the connection on any Host header that doesn't match one of the
# real vhosts below, rather than silently serving one app's content under
# another's domain — which is what happens if this file is missing and
# nginx falls back to picking a default_server by load order.
server {
    listen 80 default_server;
    server_name _;
    return 444;
}