ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;

#ssl_stapling on;
#ssl_stapling_verify on;
#resolver 8.8.8.8 1.1.1.1 valid=300s;
#resolver_timeout 3s;

#ssl_dhparam /etc/ssl/private/site.dh;