include snip.d/tls-common;
ssl_protocols TLSv1.3;
ssl_session_cache shared:ssl-modern:20m;
ssl_prefer_server_ciphers off;
ssl_early_data on;