From 60e3dc12e0d754a345048cffeba8ab8f0f68eab7 Mon Sep 17 00:00:00 2001
From: Hakase <hakase@hakase.app>
Date: Sat, 13 Oct 2018 14:46:25 +0900
Subject: [PATCH] Fix nginx.conf settings.

---
 conf/nginx.conf | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/conf/nginx.conf b/conf/nginx.conf
index 0aa80b9..790ebe4 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -52,12 +52,14 @@ http {
     real_ip_header     CF-Connecting-IP;
 
     # SSL Config
-    strict_sni on;
-    strict_sni_header on;
+    ## Strict SNI must use fake server.
+    strict_sni off;
+    ## Strict SNI Header must use 'strict_sni'.
+    strict_sni_header off;
     ssl_dyn_rec_enable on;
     ssl_early_data on;
 
-    ## SSL OCSP Stapling
+    # SSL OCSP Stapling
     resolver 1.1.1.1 1.0.0.1 valid=86400s ipv6=off;
     resolver_timeout 15s;
     ssl_stapling on;