diff --git a/conf/nginx.conf b/conf/nginx.conf index 0aa80b9..790ebe4 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -52,12 +52,14 @@ http { real_ip_header CF-Connecting-IP; # SSL Config - strict_sni on; - strict_sni_header on; + ## Strict SNI must use fake server. + strict_sni off; + ## Strict SNI Header must use 'strict_sni'. + strict_sni_header off; ssl_dyn_rec_enable on; ssl_early_data on; - ## SSL OCSP Stapling + # SSL OCSP Stapling resolver 1.1.1.1 1.0.0.1 valid=86400s ipv6=off; resolver_timeout 15s; ssl_stapling on;