diff --git a/rootfs/etc/nginx/http.d/default.conf b/rootfs/etc/nginx/http.d/default.conf
new file mode 100644
index 0000000..4704a69
--- /dev/null
+++ b/rootfs/etc/nginx/http.d/default.conf
@@ -0,0 +1,17 @@
+# This is a default site configuration which will simply return 404, preventing
+# chance access to any other virtualhost.
+
+server {
+	listen 80 default_server;
+	listen [::]:80 default_server;
+
+	# Everything is a 404
+	location / {
+		return 404;
+	}
+
+	# You may need this to prevent return 404 recursion.
+	location = /404.html {
+		internal;
+	}
+}