# Calculate comment=#
# Modern secure SSL configuration
ssl_protocols TLSv1.2 TLSv1.3;

# Security headers
add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

# Sessions
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1h;
ssl_session_tickets off;