Add ghost.swave.lol alias and catch-all for unknown subdomains

Add ghost.swave.lol as Ghost alias in nginx and certbot. Add default
server blocks that serve a styled 404 error page for any subdomain
not configured on the server.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

1 files changed, 44 insertions, 3 deletions

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 8112e28..063ff2a 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -1,10 +1,51 @@
 error_log /var/log/nginx/error.log warn;
 
+# Default catch-all for unknown subdomains (HTTP)
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+
+    server_name _;
+
+    root /usr/share/nginx/error-pages;
+    error_page 404 /unknown-host.html;
+
+    location / {
+        return 404;
+    }
+
+    location = /unknown-host.html {
+        internal;
+    }
+}
+
+# Default catch-all for unknown subdomains (HTTPS)
+server {
+    listen 443 ssl http2 default_server;
+    listen [::]:443 ssl http2 default_server;
+
+    server_name _;
+
+    ssl_certificate /var/letsencrypt/etc/live/swave.lol/fullchain.pem;
+    ssl_certificate_key /var/letsencrypt/etc/live/swave.lol/privkey.pem;
+
+    root /usr/share/nginx/error-pages;
+    error_page 404 /unknown-host.html;
+
+    location / {
+        return 404;
+    }
+
+    location = /unknown-host.html {
+        internal;
+    }
+}
+
 server {
     listen 80;
     listen [::]:80;
 
-    server_name swave.lol blog.swave.lol jenkins.swave.lol cgit.swave.lol gerrit.swave.lol;
+    server_name swave.lol blog.swave.lol ghost.swave.lol jenkins.swave.lol cgit.swave.lol gerrit.swave.lol;
 
     location / {
         rewrite ^ https://$host$request_uri? permanent;
@@ -17,12 +58,12 @@ server {
     }
 }
 
-# Ghost — swave.lol and blog.swave.lol
+# Ghost — swave.lol, blog.swave.lol, ghost.swave.lol
 server {
     listen 443 ssl http2;
     listen [::]:443 ssl http2;
 
-    server_name swave.lol blog.swave.lol;
+    server_name swave.lol blog.swave.lol ghost.swave.lol;
 
     server_tokens off;