server { listen 202.61.255.116:443 ssl http2; listen [2a03:4000:55:d20::]:443 ssl http2; server_name georg-pfuetzenreuter.net pfuetzenreuter.at gippy.at; ssl_certificate /etc/ssl/georg/533088712.crt; ssl_certificate_key /etc/ssl/georg/my.key; ssl_session_timeout 1d; ssl_session_cache shared:MozSSLS:10m; ssl_session_tickets off; ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers off; add_header Strict-Transport-Security "max-age=63072000" always; ssl_stapling on; ssl_stapling_verify on; ssl_trusted_certificate /etc/ssl/georg/533088712.ca-bundle; resolver 127.0.0.4; root /srv/www/htdocs/georg; index index.html; }