salt/base/nginx/ssl-files/conf.d/ssl-drop-inv...

server {
	listen		443 default_server;
	server_name	"";

	include		include/ssl.conf;

	# This config won't work without a valid certificate.
	# We use a dummy certificate instead of a wildcard one as
	# Let's Encrypt currently does not offer wildcard certificates.
	# Anyone who hits this virtual server is doing something wrong
	# anway, so an invalid certificate won't add to their problems.
	ssl_certificate /etc/nginx/ssl.d/dummy-cert.pem;
	ssl_certificate_key /etc/nginx/ssl.d/dummy-key.pem;

	return		444;
}