https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_reject_handshake
server { listen 443 ssl default_server; ssl_reject_handshake on; }