my-nixpkgs: fix default nginx config

Flake lock file updates:

• Updated input 'my-nixpkgs':
    'github:qaristote/my-nixpkgs/aa8af127cef35820a05a9d2c3ab371fa3ddc4795' (2026-01-24)
  → 'github:qaristote/my-nixpkgs/2fd9ddfd4925f85dda9ba2fd7fb5ec5c07864c45' (2026-01-25)

1 files changed, 10 insertions, 1 deletions

diff --git a/config/services/web/default.nix b/config/services/web/default.nix
index 1fd1a51..fff7afe 100644
--- a/config/services/web/default.nix
+++ b/config/services/web/default.nix
@@ -14,6 +14,15 @@
     defaults.email = "quentin@aristote.fr";
   };
 
-  services.nginx.enable = true;
+  services.nginx = {
+    enable = true;
+    # return 444 when trying to connect to some unknown virtual host
+    virtualHosts."_" = {
+      default = true;
+      extraConfig = ''
+        return 444;
+      '';
+    };
+  };
   systemd.services.nginx.personal.monitor = true;
 }