server {
  listen 80 default_server;
  listen 80 default_server quic reuseport;
  listen [::]:80 default_server;
  listen [::]:80 default_server quic reuseport;
  server_name _;
  return 301 https://$host$request_uri;
}

server {
  listen 443 default_server ssl http2;
  listen [::]:443 ssl http2;
  server_name _;
#  index index.html index.htm;
  ssl_certificate /etc/nginx/hatthieves.crt;
  ssl_certificate_key /etc/nginx/hatthieves.key;
  ssl_dhparam /etc/nginx/dhparam.pem;
#  ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA128:DHE-RSA-AES128-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA128:ECDHE-RSA-AES128-SHA384:ECDHE-RSA-AES128-SHA128:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA128:DHE-RSA-AES128-SHA128:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA384:AES128-GCM-SHA128:AES128-SHA128:AES128-SHA128:AES128-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
  ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_prefer_server_ciphers on;
  ssl_session_cache shared:SSL:10m;
#  add_header Alt-Svc 'h3-25=":443"; ma=86400';
  add_header alt-svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
}

server {
  listen 443 ssl http2;
  listen 443 default_server quic reuseport;
  listen [::]:443 ssl http2;
  listen [::]:443 default_server quic reuseport;
  server_name hatthieves.com *.hatthieves.com;
#  index index.html index.htm;
  ssl_certificate /etc/nginx/hatthieves.com.crt;
  ssl_certificate_key /etc/nginx/hatthieves.com.key;
  ssl_dhparam /etc/nginx/dhparam.pem;
#  ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:ECDHE-RSA-AES128-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA128:DHE-RSA-AES128-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA128:ECDHE-RSA-AES128-SHA384:ECDHE-RSA-AES128-SHA128:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA128:DHE-RSA-AES128-SHA128:DHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA384:AES128-GCM-SHA128:AES128-SHA128:AES128-SHA128:AES128-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
  ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_prefer_server_ciphers on;
  ssl_session_cache shared:SSL:10m;
#  add_header Alt-Svc 'h3-25=":443"; ma=86400';
  add_header alt-svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
  location / {
  return 301 https://www.hatthieves.es;
#  rewrite ^/(.*)$ https://www.hatthieves.es/$1 permanent;
  }

}

