From e4ee865dde9bd198e86039cad2371b001eee6073 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Wed, 24 Apr 2024 19:57:58 -0400
Subject: [PATCH] replace deprecated http2 listen parameter

---
 nginx/nginx.conf | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 3d33e75..329a520 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -1,4 +1,4 @@
-# nginx 1.24.x
+# nginx 1.26.x
 
 load_module modules/ngx_http_brotli_static_module.so;
 
@@ -14,6 +14,8 @@ events {
 }
 
 http {
+    http2 on;
+
     root /var/empty;
 
     include mime.types;
@@ -127,8 +129,8 @@ http {
     }
 
     server {
-        listen 443 default_server ssl http2 backlog=4096;
-        listen [::]:443 default_server ssl http2 backlog=4096;
+        listen 443 default_server ssl backlog=4096;
+        listen [::]:443 default_server ssl backlog=4096;
         ssl_reject_handshake on;
 
         # https://trac.nginx.org/nginx/ticket/2012
@@ -138,8 +140,8 @@ http {
     }
 
     server {
-        listen 443 ssl http2;
-        listen [::]:443 ssl http2;
+        listen 443 ssl;
+        listen [::]:443 ssl;
         server_name seamlessupdate.app www.seamlessupdate.app;
 
         include snippets/security-headers.conf;
@@ -151,8 +153,8 @@ http {
     }
 
     server {
-        listen 443 ssl http2;
-        listen [::]:443 ssl http2;
+        listen 443 ssl;
+        listen [::]:443 ssl;
         server_name releases.grapheneos.org;
 
         include root_releases.grapheneos.org.conf;
@@ -284,8 +286,8 @@ http {
     }
 
     server {
-        listen 443 ssl http2;
-        listen [::]:443 ssl http2;
+        listen 443 ssl;
+        listen [::]:443 ssl;
         server_name apps.grapheneos.org;
 
         include root_apps.grapheneos.org.conf;