From 2b8748fddb2367fa683e41ec35b8c73f52dd85e9 Mon Sep 17 00:00:00 2001
From: Hikari <hikari@nhcarrigan.com>
Date: Tue, 10 Mar 2026 12:16:17 -0700
Subject: [PATCH] feat: add catch-all server blocks for unmatched subdomains
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

✨ This commit was made with help from Hikari~ 🌸
---
 nginx/nginx/sites-available/catch-all.conf | 22 ++++++++++++++++++++++
 nginx/nginx/sites-available/default        | 14 +++++++-------
 2 files changed, 29 insertions(+), 7 deletions(-)
 create mode 100644 nginx/nginx/sites-available/catch-all.conf

diff --git a/nginx/nginx/sites-available/catch-all.conf b/nginx/nginx/sites-available/catch-all.conf
new file mode 100644
index 0000000..47f07fa
--- /dev/null
+++ b/nginx/nginx/sites-available/catch-all.conf
@@ -0,0 +1,22 @@
+# Catch-all for unmatched subdomains - serves a 404 page.
+server {
+  listen 443 ssl default_server;
+  listen [::]:443 ssl default_server;
+
+  ssl_certificate /etc/letsencrypt/live/nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/nhcarrigan.com/privkey.pem;
+
+  server_name _;
+
+  root /home/naomi/404;
+
+  error_page 404 /index.html;
+
+  location / {
+    return 404;
+  }
+
+  location = /index.html {
+    internal;
+  }
+}
diff --git a/nginx/nginx/sites-available/default b/nginx/nginx/sites-available/default
index 4876607..6a365d8 100644
--- a/nginx/nginx/sites-available/default
+++ b/nginx/nginx/sites-available/default
@@ -2,17 +2,17 @@ server {
 	listen 80 default_server;
 	listen [::]:80 default_server;
 
-	root /var/www/html;
-	index index.html index.htm index.nginx-debian.html;
-
 	server_name _;
 
+	root /home/naomi/404;
+
+	error_page 404 /index.html;
+
 	location / {
-		try_files $uri $uri/ =404;
+		return 404;
 	}
 
-	error_page 500 502 503 504 /50x.html;
-	location = /50x.html {
-		root /usr/share/nginx/html;
+	location = /index.html {
+		internal;
 	}
 }