On Tue, Aug 18, 2020 at 09:28:18PM -0400, trondd wrote: > The bug here is in how additional listen lines interact with the remaining > configuration. The first listen line in a server block gets the tls block > and it doesn't get applied to the second listen line. Except for certs > and keys which are handled differently for SNI.
I rechecked, you're right. In TLS block except for key & certificate, sub domain server (or the server defined at last) inherits config from previously defined one (in example config, main server). Is it worthy of a bug or could be confusion on configs?