nginx.conf.retry

daemon off;

user root;

error_log /dev/stdout debug;

events {
    worker_connections 1024;
}

http {
    access_log /dev/stdout;

    ssl_certificate     /certs/cert.pem;
    ssl_certificate_key /certs/priv.key;

    # quic requires TLS 1.3
    ssl_protocols TLSv1.2 TLSv1.3;
    # enable 0-RTT
    ssl_early_data on;
    ssl_session_tickets on;

    keepalive_requests 5000;

    server {
        server_name localhost;
        listen *:443 ssl;
        listen *:443 quic reuseport;
        listen [::]:443 ssl;
        listen [::]:443 quic reuseport;

        http3_hq on;

        add_header Alt-Svc 'hq-29=":443"';
        location / {
            root /www;
        }
        quic_retry on;
    }

    include       mime.types;
    default_type  application/octet-stream;
}