From aba87194e7a4baaa2b848b9f951ec1c11e489130 Mon Sep 17 00:00:00 2001
From: Tang Eason <tangyisheng2@sina.com>
Date: Tue, 5 May 2020 20:09:43 +0800
Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E4=BA=86NGINX=E5=AF=B9IPv6?=
 =?UTF-8?q?=E7=9A=84=E7=9B=91=E5=90=AC=E5=92=8CTLSv1.3=E7=9A=840-RTT?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 install.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/install.sh b/install.sh
index 3713662..fc36a8d 100644
--- a/install.sh
+++ b/install.sh
@@ -522,6 +522,7 @@ nginx_conf_add() {
     cat >${nginx_conf_dir}/v2ray.conf <<EOF
     server {
         listen 443 ssl http2;
+        listen [::]:443 http2;
         ssl_certificate       /data/v2ray.crt;
         ssl_certificate_key   /data/v2ray.key;
         ssl_protocols         TLSv1.3;
@@ -530,6 +531,13 @@ nginx_conf_add() {
         index index.html index.htm;
         root  /home/wwwroot/3DCEList;
         error_page 400 = /400.html;
+
+        # Config for 0-RTT in TLSv1.3
+        ssl_early_data on;
+        ssl_stapling on;
+        ssl_stapling_verify on; 
+        add_header Strict-Transport-Security "max-age=31536000";
+
         location /ray/
         {
         proxy_redirect off;
@@ -540,10 +548,14 @@ nginx_conf_add() {
         proxy_set_header Upgrade \$http_upgrade;
         proxy_set_header Connection "upgrade";
         proxy_set_header Host \$http_host;
+        
+        # Config for 0-RTT in TLSv1.3
+        proxy_set_header Early-Data $ssl_early_data;
         }
 }
     server {
         listen 80;
+        listen [::]:80;
         server_name serveraddr.com;
         return 301 https://use.shadowsocksr.win\$request_uri;
     }