From 6cd29b72a7d9d8c99e330f6ead7fddd6f16cffdd Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Fri, 5 Jul 2019 10:20:00 +0300
Subject: [PATCH] nginx: enable http2 protocol

---
 roles/nginx/server/templates/nginx.conf.j2 | 4 ++--
 roles/nginx/site/templates/site.conf.j2    | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/roles/nginx/server/templates/nginx.conf.j2 b/roles/nginx/server/templates/nginx.conf.j2
index 227f25b..081cb3b 100644
--- a/roles/nginx/server/templates/nginx.conf.j2
+++ b/roles/nginx/server/templates/nginx.conf.j2
@@ -24,8 +24,8 @@ http {
     ssl_prefer_server_ciphers on;
 
     server {
-        listen 443 ssl;
-        listen [::]:443 ssl;
+        listen 443 ssl http2;
+        listen [::]:443 ssl http2;
         server_name {{ inventory_hostname }};
 
         ssl_certificate {{ tls_certs }}/{{ inventory_hostname }}-fullchain.crt;
diff --git a/roles/nginx/site/templates/site.conf.j2 b/roles/nginx/site/templates/site.conf.j2
index 6e28525..39bf694 100644
--- a/roles/nginx/site/templates/site.conf.j2
+++ b/roles/nginx/site/templates/site.conf.j2
@@ -6,8 +6,8 @@ upstream upstream_{{ site }} {
 }
 {% endif %}
 server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
     server_name {{ site }};
 
     ssl_certificate {{ tls_certs }}/{{ site }}-fullchain.crt;