Merge pull request #8 from secondlife/signal/name

Add SERVER_NAME option

Author: bennettgoble

README.md

@@ -8,8 +8,9 @@ Pair nginx-proxy with your favorite upstream server (wsgi, uwsgi, asgi, et al.)
 
 | Environment Variable | Description | Required | Default | Example |
 |----------------------|-------------|----------|---------|---------|
+| `LISTEN_PORT` | Server port | Yes | 80 | |
 | `PROXY_REVERSE_URL` | Upstream server URL | Yes | | http://myapp:8080 |
-| `LISTEN_PORT` | Server port | Yes | 8080 | |
+| `SERVER_NAME` | Allowed server names (hostnames) | Yes | | |
 | `SILENT` | Silence entrypoint output | No | | |
 | `STATIC_LOCATIONS` | Static asset mappings | No | | |
 

src/etc/nginx/templates/default.conf.template

@@ -1,6 +1,16 @@
+# Default configuration returns 400 in order to deny any request with an 
+# unrecognized host header (server_name.)
+{{ if (ne .Env.SERVER_NAME "_") }}
+server {
+    listen {{ .Env.LISTEN_PORT }};
+    server_name _;
+    return 400;
+}
+{{ end }}
+
 server {
   listen {{ .Env.LISTEN_PORT }};
-  server_name _;
+  server_name {{ .Env.SERVER_NAME }};
   add_header X-Request-ID $request_id;
 
   # Security Headers

test/test.sh

@@ -9,6 +9,7 @@ function fail {
 
 LISTEN_PORT="8080" \
 PROXY_REVERSE_URL="http://localhost:8081" \
+SERVER_NAME="localhost" \
 STATIC_LOCATIONS="/static/:/test/static/" \
   /docker-entrypoint.sh