>>540475
It might make things more difficult to report if you mask the origin server. Right now it is very easy to get the origin IP and escalate reports directly to the source instead of forcing everything through Cloudflare.
Something simple like if/else deny in the server block with a fake :80/localhost block is enough.
server {
server_name _;
listen 80 default_server;
listen [::]:80 default_server;
location / {
return 444;
}
}
And in main server block:
set $my_var 0;
if ($host = waifuist.pro) {
set $my_var 1;
}
if ($host = www.waifuist.pro) {
set $my_var 1;
}
if ($my_var = 0) {
return 444;
}
Though I know Frantac has DDoS protected IPs, might as well keep everything forced through Cloudflare anyways, because right now I can bypass Cloudflare and the domain with originIP:443 connection.
Something to consider^^