Merge pull request #353 from nemchik/0-RTT

Add ssl_early_data directives

Author: aptalca

root/defaults/proxy.conf

@@ -1,4 +1,4 @@
-## Version 2019/04/07 - Changelog: https://github.com/linuxserver/docker-letsencrypt/commits/master/root/defaults/proxy.conf
+## Version 2019/08/11 - Changelog: https://github.com/linuxserver/docker-letsencrypt/commits/master/root/defaults/proxy.conf
 
 client_body_buffer_size 128k;
 
@@ -11,6 +11,9 @@ proxy_read_timeout 240;
 proxy_send_timeout 240;
 proxy_connect_timeout 240;
 
+# TLS 1.3 early data
+proxy_set_header Early-Data $ssl_early_data;
+
 # Basic Proxy Config
 proxy_set_header Host $host:$server_port;
 proxy_set_header X-Real-IP $remote_addr;

root/defaults/ssl.conf

@@ -1,4 +1,4 @@
-## Version 2019/06/19 - Changelog: https://github.com/linuxserver/docker-letsencrypt/commits/master/root/defaults/ssl.conf
+## Version 2019/08/11 - Changelog: https://github.com/linuxserver/docker-letsencrypt/commits/master/root/defaults/ssl.conf
 
 # session settings
 ssl_session_timeout 1d;
@@ -25,6 +25,9 @@ ssl_stapling on;
 ssl_stapling_verify on;
 resolver 127.0.0.11 valid=30s; # Docker DNS Server
 
+# Enable TLS 1.3 early data
+ssl_early_data on;
+
 # Optional additional headers
 #add_header Content-Security-Policy "upgrade-insecure-requests";
 #add_header X-Frame-Options "SAMEORIGIN" always;