# Catch-all for unmatched subdomains - serves a 404 page.
server {
  listen 443 ssl default_server;
  listen [::]:443 ssl default_server;

  ssl_certificate /etc/letsencrypt/live/nhcarrigan.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/nhcarrigan.com/privkey.pem;

  server_name _;

  root /home/naomi/404;

  error_page 404 /index.html;

  location / {
    return 404;
  }

  location = /index.html {
    internal;
  }
  include /etc/nginx/snippets/deny-dotfiles.conf;
}