my-nixpkgs: fix default nginx config

Flake lock file updates:

• Updated input 'my-nixpkgs':
    'github:qaristote/my-nixpkgs/aa8af127cef35820a05a9d2c3ab371fa3ddc4795' (2026-01-24)
  → 'github:qaristote/my-nixpkgs/2fd9ddfd4925f85dda9ba2fd7fb5ec5c07864c45' (2026-01-25)

2 files changed, 13 insertions, 4 deletions

diff --git a/config/services/web/default.nix b/config/services/web/default.nix
index 1fd1a51..fff7afe 100644
--- a/config/services/web/default.nix
+++ b/config/services/web/default.nix
@@ -14,6 +14,15 @@
     defaults.email = "quentin@aristote.fr";
   };
 
-  services.nginx.enable = true;
+  services.nginx = {
+    enable = true;
+    # return 444 when trying to connect to some unknown virtual host
+    virtualHosts."_" = {
+      default = true;
+      extraConfig = ''
+        return 444;
+      '';
+    };
+  };
   systemd.services.nginx.personal.monitor = true;
 }
diff --git a/flake.lock b/flake.lock
index f666c7a..5b372b9 100644
--- a/flake.lock
+++ b/flake.lock
@@ -270,11 +270,11 @@
         "nur": "nur"
       },
       "locked": {
-        "lastModified": 1769288185,
-        "narHash": "sha256-ExHHRT4BeUdOc/wbAuLn7iC8AU3z5yr5GlOxzaudaG4=",
+        "lastModified": 1769372290,
+        "narHash": "sha256-ymOgGWY2ym8DO5DdQe6+3UDO77ALX1XZUm0oE5L9w1k=",
         "owner": "qaristote",
         "repo": "my-nixpkgs",
-        "rev": "aa8af127cef35820a05a9d2c3ab371fa3ddc4795",
+        "rev": "2fd9ddfd4925f85dda9ba2fd7fb5ec5c07864c45",
         "type": "github"
       },
       "original": {