ssl_protocols TLSv1.3 TLSv1.2 TLSv1.1 TLSv1; ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"; ssl_certificate /etc/kvmd/nginx/ssl/server.crt; ssl_certificate_key /etc/kvmd/nginx/ssl/server.key; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;