diff --git a/http/default.conf b/http/default.conf index 689ce0f..4f26c6e 100644 --- a/http/default.conf +++ b/http/default.conf @@ -1,4 +1,5 @@ server { + listen 443 quic reuseport default_server; listen 443 ssl default_server; server_name *.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/gitea.conf b/http/gitea.conf index 9ddd79d..f2f68d6 100644 --- a/http/gitea.conf +++ b/http/gitea.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name git.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/homepage.conf b/http/homepage.conf index 7336e7e..3d69073 100644 --- a/http/homepage.conf +++ b/http/homepage.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/minecraft.conf b/http/minecraft.conf index 4f60934..ada7f91 100644 --- a/http/minecraft.conf +++ b/http/minecraft.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name minecraft.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/office.conf b/http/office.conf index 7f617d9..a048132 100644 --- a/http/office.conf +++ b/http/office.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name office.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/opns.conf b/http/opns.conf index 752825d..7a71e81 100644 --- a/http/opns.conf +++ b/http/opns.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name opns.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/paas.conf b/http/paas.conf index b1060eb..4d93ad1 100644 --- a/http/paas.conf +++ b/http/paas.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name paas.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/pve.conf b/http/pve.conf index a47c0ca..1710c84 100644 --- a/http/pve.conf +++ b/http/pve.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name pve.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/root.conf b/http/root.conf index 37c4da2..618ac67 100644 --- a/http/root.conf +++ b/http/root.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name root.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/status.conf b/http/status.conf index a3bb57d..278b6d4 100644 --- a/http/status.conf +++ b/http/status.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name status.tronnet.net; include snippets/ssl-acme.conf; diff --git a/http/wiki.conf b/http/wiki.conf index c6cb683..208b5d4 100644 --- a/http/wiki.conf +++ b/http/wiki.conf @@ -1,4 +1,5 @@ server { + listen 443 quic; listen 443 ssl; server_name wiki.tronnet.net; include snippets/ssl-acme.conf; diff --git a/ssl-params.conf b/ssl-params.conf index 510b517..0c3e068 100644 --- a/ssl-params.conf +++ b/ssl-params.conf @@ -10,6 +10,8 @@ ssl_stapling on; ssl_stapling_verify on; resolver 8.8.8.8 8.8.4.4 valid=300s; resolver_timeout 5s; +# quic alternate service advertisement +add_header Alt-Svc 'h3=":443"; ma=864000'; # ssl cert paths ssl_dhparam /etc/ssl/certs/dhparam.pem; ssl_certificate /etc/letsencrypt/live/tronnet.net/fullchain.pem;