Add TLS v1.3 support (#11603)

Maintain TLS v1.2 compatibility (might want to drop this later) and add support for TLS v1.3

diff --git a/dist/nginx.conf b/dist/nginx.conf
index 7c429bad42e5b25127db73d487968dd66e4e62e8..b6591e8976d13c7f3fdc11fa94ce7e0356b579b5 100644 (file)
--- a/dist/nginx.conf
+++ b/dist/nginx.conf
@@ -19,7 +19,7 @@ server {
   listen [::]:443 ssl http2;
   server_name example.com;
 
-  ssl_protocols TLSv1.2;
+  ssl_protocols TLSv1.2 TLSv1.3;
   ssl_ciphers HIGH:!MEDIUM:!LOW:!aNULL:!NULL:!SHA;
   ssl_prefer_server_ciphers on;
   ssl_session_cache shared:SSL:10m;