server { listen 443 default_server; server_name _; ssl on; ssl_certificate /etc/ssl/certs/example.org.crt; ssl_certificate_key /etc/ssl/private/example.org.pem; return 403; }