diff --git a/README.md b/README.md
index f509d4c..fd78302 100644
--- a/README.md
+++ b/README.md
@@ -911,7 +911,7 @@ If set to yes, HTTPS will be enabled with certificate/key of your choice.
 Values : *\<any valid path inside the container\>*  
 Default value :  
 Context : *global*, *multisite*  
-Full path of the certificate file to use when `USE_CUSTOM_HTTPS` is set to yes.  
+Full path of the certificate or bundle file to use when `USE_CUSTOM_HTTPS` is set to yes. If your chain of trust contains one or more intermediate certificate(s), you will need to bundle them into a single file (more info [here](https://nginx.org/en/docs/http/configuring_https_servers.html#chains)).  
 
 `CUSTOM_HTTPS_KEY`  
 Values : *\<any valid path inside the container\>*  
diff --git a/confs/site/main-lua.conf b/confs/site/main-lua.conf
index 1606961..78c27e6 100644
--- a/confs/site/main-lua.conf
+++ b/confs/site/main-lua.conf
@@ -96,7 +96,7 @@ end
 
 -- check if user-agent is allowed
 if use_user_agent and ngx.var.bad_user_agent == "yes" then
-	local block = false
+	local block = true
 	for k, v in pairs(whitelist_user_agent) do
 		if string.match(ngx.var.http_user_agent, v) then
 			ngx.log(ngx.NOTICE, "[ALLOW] User-Agent " .. ngx.var.http_user_agent .. " is whitelisted")