server {
    listen [::]:443 ssl http2;
    listen 443 ssl;

    #ANPASSEN
    server_name bruteforce.alenan.org *.bruteforce.alenan.org;

    root /var/www/html;
    index index.html;

    autoindex off;

    #/anpassen

    #Add headers
    add_header Strict-Transport-Security 'max-age=31526000; includeSubDomains; preload';

    #Define all TLS/SSL
    ssl on;

    ssl_certificate /etc/[..]/chain.pem;
    ssl_certificate_key /etc/[...]/privkey.pem;
    #ssl_dhparam /etc/nginx/ssl/dhparam4096.pem;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers AES256+EECDH:AES256+EDH:!aNULL;
    ssl_prefer_server_ciphers on;
    ssl_buffer_size 1400;
    ssl_session_cache shared:SSL:10m;
    ssl_session_cache shared:ssl_session_cache:10m;
    ssl_session_timeout 24h;

    #Stabling
    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.4.4 8.8.8.8 valid=300s;
    resolver_timeout 10s;
}