nginx 版本 1.26 以上

listen 443 ssl;
listen [::]:443 ssl;
listen 443 quic reuseport; # reuseport 只能配置一次
listen [::]:443 quic reuseport; # quic 不能和 ssl 同一行
http2 on;
ssl_certificate /fullchain.cer;
ssl_certificate_key /private.key;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_protocols TLSv1.3;
ssl_prefer_server_ciphers off;
add_header Alt-Svc 'h3=":443"; ma=86400';
add_header Strict-Transport-Security "max-age=63072000" always;