nginx https 如何有效禁止ip访问

当前nginx配置如下：

server {
    listen 443 ssl http2;
    ssl on;
    ssl_certificate www.domain.com.crt;
    ssl_certificate_key www.domain.com.key;
    ssl_session_timeout 5m;
    ssl_prefer_server_ciphers on;
    server_name www.domain.com domain.com；
    root /home/public;
    index  index.html index.htm;
    
    if ($host !=  www.domain.com) {
        rewrite ^/(.*)$ $scheme://www.domain.com/$1 permanent;
    }
}
server {
    listen 80 default;
    server_name  www.domain.com  domain.com;
    rewrite ^/(.*) https:// www.domain.com/$1 permanent;
}