Generalizing GeoIP to be consumed by more services

roles/WebServer/files/conf.d/Yggdrasil/aaa_default.conf

@@ -1,5 +1,6 @@
 server {
-    listen      443 ssl http2;
+    listen      443 ssl;
+    http2 on;
     server_name default_server;
 
     include conf/sec.conf;
@@ -7,6 +8,9 @@ server {
 
     include conf/letsencrypt.conf;
 
+    # GeoIP block
+    if ($deny) { return 503; }
+
     location / {
 
       rewrite ^/martialarts(\/)*(\/index.html)*$ /assets/martialarts/index.html;
@@ -65,7 +69,8 @@ server {
 }
 
 server {
-    listen      443 ssl http2;
+    listen      443 ssl;
+    http2 on;
     server_name foundation.aninix.net;
     include conf/sec.conf;
     include conf/letsencrypt.conf;