https.conf

# https://www.nginx.com/blog/introducing-technology-preview-nginx-support-for-quic-http-3/
server {
    # quic and http/3
    listen 443 quic reuseport;

    # http/2 and http/1.1
    listen 443 ssl;
    http2 on;
    server_name localhost;

    # openssl-generated pair for local development
    # https://letsencrypt.org/docs/certificates-for-localhost/
    ssl_certificate     /etc/nginx/ssl/localhost.crt;
    ssl_certificate_key /etc/nginx/ssl/localhost.key;

    # TLSv1.3 is required for QUIC.
    ssl_protocols TLSv1.2 TLSv1.3;

    # 0-RTT QUIC connection resumption
    ssl_early_data on;

    # Add Alt-Svc header to negotiate HTTP/3.
    add_header alt-svc 'h3=":8889"; ma=86400';
    add_header QUIC-Status $http3;     # Sent when QUIC was used

    location / {
        root   /static;

        gzip_static on;
        brotli_static on;

        expires 1d;
    }
}