http3/quic

diff --git a/etc/nginx/conf.d/default.conf b/etc/nginx/conf.d/default.conf
index d5f349b1f4efd63c7e7c880a3eccb6a9e2197aa4..23c9df88f5a56f1dffebfaabe0618f72768d0b16 100644 (file)
--- a/etc/nginx/conf.d/default.conf
+++ b/etc/nginx/conf.d/default.conf
@@ -39,8 +39,23 @@ server {
   server_name nutra.tk;
   #listen 80 default_server;
   #listen [::]:80 ipv6only=on;
-  listen 443 ssl http2 default_server;
-  listen [::]:443 ssl ipv6only=on; # managed by Certbot
+  # listen 443 ssl http2 default_server;
+  # listen [::]:443 ssl ipv6only=on; # managed by Certbot
+
+  # HTTP/3 (QUIC) - UDP
+  listen 443 quic reuseport default_server;
+  listen [::]:443 quic reuseport default_server;
+
+  # HTTP/2 & 1.1 (Fallback) - TCP
+  listen 443 ssl default_server;
+  listen [::]:443 ssl default_server;
+
+  # Enable HTTP/2 (New syntax for Nginx 1.25+)
+  http2 on;
+
+  # Advertise HTTP/3 availability to browsers
+  add_header Alt-Svc 'h3=":443"; ma=86400';
+
   # HSTS
   add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
   # OCSP stapling