include snip.d/tls-common;

ssl_protocols              TLSv1.3;
ssl_session_cache          shared:ssl-modern:20m;
ssl_prefer_server_ciphers  off;
ssl_early_data             on;