updating nginx conf

Author: byeskille

src/nginx.conf

@@ -1,7 +1,7 @@
 #user  nobody;
 worker_processes  1;
 
-#error_log  logs/error.log;
+error_log  /var/log/nginx/error.log;
 #error_log  logs/error.log  notice;
 #error_log  logs/error.log  info;
 
@@ -17,11 +17,11 @@ http {
     include       mime.types;
     default_type  application/octet-stream;
 
-    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
-    #                  '$status $body_bytes_sent "$http_referer" '
-    #                  '"$http_user_agent" "$http_x_forwarded_for"';
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
 
-    #access_log  logs/access.log  main;
+    access_log  /var/log/nginx/access.log  main;
 
     sendfile        on;
     #tcp_nopush     on;
@@ -34,7 +34,8 @@ http {
     proxy_cache_key "$scheme$request_method$host$request_uri";
 
     server {
-    listen [::]:4343 ssl;
+    listen 4343 ssl http2;
+    listen [::]:4343 ssl http2;
         server_name tls13.byeskille.no www.tls13.byeskille.no;
 
         ssl_certificate /etc/nginx/keys/chained.pem;
@@ -54,7 +55,7 @@ http {
 
             # modern configuration. tweak to your needs.
             ssl_protocols TLSv1.2 TLSv1.3;
-            ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
+            ssl_ciphers 'TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-256-GCM-SHA384:ECDHE:!COMPLEMENTOFDEFAULT';
             ssl_prefer_server_ciphers on;
 
             # OCSP Stapling ---