nginx default_server

[Fright]

sorry, why not?
of course it should be possible to enbale proxy_protocol separately for http/https and this is not a part of a "default_server" quick fix

[8191]

Does that even make sense for https? I intentionally only implemented it for http.

You mean because it will most likely be a certificate mismatch to the hostname in all cases? One could use wildcard certificates to overcome this.

[fabian]

You mean because it will most likely be a certificate mismatch to the hostname in all cases? One could use wildcard certificates to overcome this.

Actually, you can use other matches than hostnames in SAN. For example IP addresses, however I think this is quite uncommon and not in use by public CAs.