http3

diff --git a/etc/nginx/conf.d/git-http.conf b/etc/nginx/conf.d/git-http.conf
index 2c6604a1b68e36556aaf95d159988cf4298350e6..d15d203e7bcba62805276145e27b04b63a42e42c 100644 (file)
--- a/etc/nginx/conf.d/git-http.conf
+++ b/etc/nginx/conf.d/git-http.conf
@@ -49,7 +49,21 @@ server {
         fastcgi_pass unix:/var/run/fcgiwrap.socket;
     }
 
+    listen 443 quic;
+    listen [::]:443 quic;
     listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+    http3 on;
+
+    server_name git.nutra.tk;
+
+    # Advertise HTTP/3 availability to browsers
+    add_header Alt-Svc 'h3=":443"; ma=86400' always;
+
+    # HSTS
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
+
     ssl_certificate /etc/letsencrypt/live/earthyenergy.mooo.com/fullchain.pem; # managed by Certbot
     ssl_certificate_key /etc/letsencrypt/live/earthyenergy.mooo.com/privkey.pem; # managed by Certbot
     include /etc/letsencrypt/options-ssl-nginx.conf;
@@ -62,6 +76,7 @@ server {
     }
 
     listen 80;
+    listen [::]:80;
     server_name git.nutra.tk;
     return 404;
 }