The Nginx Ingress Controller has configuration options for setting a default TLS certificate and a default backend. We have now exposed this settings to be configurable on a per-cluster basis.
The default backend is particularly interesting if you want to forward certain errors (like 500) to this backend service, where it can show a custom error page or maintenance page.