Merge pull request #24 from offen/development

Block access using internal hostnames or IPs

build/nginx.conf

@@ -23,6 +23,12 @@ http {
 		"~^text/html" "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'";
 	}
 
+	server {
+		# 404 for any request that does match the server names defined below
+		listen 80;
+		return 404;
+	}
+
 	server {
 		listen 80;
 		autoindex on;