server {
    server_name _;

    listen 443 default_server bind deferred ssl;
    ## TODO: reuseport
    listen 443 default_server quic reuseport;
    http2 on;

    ## nota bene
    ssl_reject_handshake on;

    ssl_protocols  TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

    access_log off;

    default_type text/plain;

    root /var/www/empty;

    location / {
        keepalive_timeout 0;
        return 200;
    }
}

## GRPC over TLS
server {
    server_name _;

    listen 444 default_server bind deferred ssl;
    ## TODO: reuseport
    listen 444 default_server quic reuseport;
    http2 on;

    ## nota bene
    ssl_reject_handshake on;

    ssl_protocols  TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

    access_log off;

    default_type text/plain;

    root /var/www/empty;

    location / {
        keepalive_timeout 0;
        return 200;
    }
}