From a36934e55d44093a6893411dd29a2dd3ccdea5e1 Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Sat, 19 Aug 2023 21:32:47 +0200
Subject: [PATCH] Enable http2

---
 .../nginx/sites-available/spring_domain_existing.conf.j2   | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/ansible/roles/spring_boot/templates/etc/nginx/sites-available/spring_domain_existing.conf.j2 b/ansible/roles/spring_boot/templates/etc/nginx/sites-available/spring_domain_existing.conf.j2
index 1f3964c..841f4f3 100644
--- a/ansible/roles/spring_boot/templates/etc/nginx/sites-available/spring_domain_existing.conf.j2
+++ b/ansible/roles/spring_boot/templates/etc/nginx/sites-available/spring_domain_existing.conf.j2
@@ -20,11 +20,12 @@ server {
         return 404;
     }
 
-    listen [::]:443 ssl ipv6only=on; # managed by Certbot
-    listen 443 ssl; # managed by Certbot
+    listen [::]:443 ssl http2 ipv6only=on; # managed by Certbot
+    listen 443 ssl http2; # managed by Certbot
     ssl_certificate /etc/letsencrypt/live/{{ spring_domain }}/fullchain.pem; # managed by Certbot
     ssl_certificate_key /etc/letsencrypt/live/{{ spring_domain }}/privkey.pem; # managed by Certbot
-    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    # include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
 }
 server {