Enable HTTP/3 QUIC

wo/cli/templates/ssl.mustache

@@ -1,5 +1,19 @@
-listen 443 ssl http2;
-listen [::]:443 ssl http2;
+# display http version used in header (optional)
+more_set_headers "X-protocol : $server_protocol always";
+
+# Advertise HTTP/3 QUIC support (required)
+more_set_headers 'Alt-Svc h3=":$server_port"; ma=86400';
+
+# enable [QUIC address validation](https://datatracker.ietf.org/doc/html/rfc9000#name-address-validation)
+quic_retry on;
+
+# Listen on port 443 with HTTP/3 QUIC
+listen 443 quic;
+listen [::]:443 quic;
+
+# listen on port 443 with HTTP/2
+listen 443 ssl;
+listen [::]:443 ssl;
 ssl_certificate     {{ssl_live_path}}/{{domain}}/fullchain.pem;
 ssl_certificate_key     {{ssl_live_path}}/{{domain}}/key.pem;
 ssl_trusted_certificate {{ssl_live_path}}/{{domain}}/ca.pem;