{{#quic}} # display http version used in header (optional) more_set_headers "X-protocol : $server_protocol always"; # Advertise HTTP/3 QUIC support (required) more_set_headers 'Alt-Svc h3=":$server_port"; ma=86400'; # enable [QUIC address validation](https://datatracker.ietf.org/doc/html/rfc9000#name-address-validation) quic_retry on; # Listen on port 443 with HTTP/3 QUIC listen 443 quic; listen [::]:443 quic; # listen on port 443 with HTTP/2 listen 443 ssl; listen [::]:443 ssl; {{/quic}} ssl_certificate {{ssl_live_path}}/{{domain}}/fullchain.pem; ssl_certificate_key {{ssl_live_path}}/{{domain}}/key.pem; ssl_trusted_certificate {{ssl_live_path}}/{{domain}}/ca.pem; ssl_stapling_verify on;