nginx docker how to only allow redirection to defined virtual hosts

Question

I run an nginx reverse proxy in front of my docker apps with virtual host environment variables. As I am using a wildcard ssl certificate, any sub-domain can be used.