23 lines
709 B
Plaintext
23 lines
709 B
Plaintext
{{#quic}}
|
|
# display http version used in header (optional)
|
|
more_set_headers "X-protocol : $server_protocol always";
|
|
|
|
# Advertise HTTP/3 QUIC support (required)
|
|
more_set_headers 'Alt-Svc h3=":$server_port"; ma=86400';
|
|
|
|
# enable [QUIC address validation](https://datatracker.ietf.org/doc/html/rfc9000#name-address-validation)
|
|
quic_retry on;
|
|
|
|
# Listen on port 443 with HTTP/3 QUIC
|
|
listen 443 quic;
|
|
listen [::]:443 quic;
|
|
|
|
# listen on port 443 with HTTP/2
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
{{/quic}}
|
|
ssl_certificate {{ssl_live_path}}/{{domain}}/fullchain.pem;
|
|
ssl_certificate_key {{ssl_live_path}}/{{domain}}/key.pem;
|
|
ssl_trusted_certificate {{ssl_live_path}}/{{domain}}/ca.pem;
|
|
ssl_stapling_verify on;
|