Ticket #1749: nginx_http2_bug.conf

user                        www-data;
worker_processes            auto;

error_log                   /tmp/nginx_error.log warn;
pid                         /var/run/nginx-http2-bug.pid;

events { }

http {
    default_type            application/octet-stream;

    ssl_dhparam             /etc/ssl/private/dhparams.pem;

server {
    listen 62.113.228.126:8443 ssl http2;
    listen [2a00:f48:1008::228:126:10]:8443 ssl http2;
    server_name hsts.c-52.maxcluster.net ;
    
    location / {
        return 200 'Hello World';
        add_header Content-Type text/plain;
    }

    ssl                         on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers                 ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK;
    ssl_prefer_server_ciphers   on;
    ssl_stapling                on;
    ssl_stapling_verify         on;

    ssl_certificate /etc/letsencrypt/live/hsts.c-52.maxcluster.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/hsts.c-52.maxcluster.net/privkey.pem;
}

}