feat: support HTTP3

Author: alpha14

base.template

@@ -7,8 +7,10 @@ server {
     # Generated with nginx-le-setup
     listen 80;
     listen [::]:80;
-    listen 443 ssl${HTTP2};
-    listen [::]:443 ssl${HTTP2};
+    listen 443 ssl http2;
+    ${HTTP3:+listen 443 http3 reuseport;}
+    listen [::]:443 ssl http2;
+    ${HTTP3:+listen [::]:443 http3 reuseport;}
     server_name ${VDOMAINS};
 
     ${CONFIG}
@@ -46,6 +48,11 @@ server {
       return 301 https://\$server_name\$request_uri;
     }
 
+    add_header X-protocol $server_protocol always;
+
+    ${HTTP3:+ add_header alt-svc 'h3=\":443\"; ma=86400';}
+    ${HTTP3:+ quic_retry on;}
+
     # HSTS (ngx_http_headers_module is required) 6 months
     add_header Strict-Transport-Security \"max-age=15768000; ${HSTS}\";
 

nginx-le-setup.sh

@@ -3,12 +3,11 @@
 #
 
 NGINX_DIR="/etc/nginx"
-HTTP2_MIN_VERSION=1.9.5
 # Internal variables
 CONFIRM=0
 FORCE=0
 _BACKUP=0
-HTTP2=""
+HTTP3=""
 # shellcheck disable=SC2034
 HSTS=""
 _CERBOT_EXTRA_ARGS=""
@@ -49,9 +48,9 @@ _initialize_variables() {
 
   _NGINX_VERSION=$(nginx -v 2>&1 | cut -d '/' -f 2)
 
-  if _version_gt "${_NGINX_VERSION}" "${HTTP2_MIN_VERSION}"; then
+  if (nginx -V 2>&1 | grep http_v3); then
     # shellcheck disable=SC2034
-    HTTP2=" http2"
+    HTTP3=1
   fi
 
   # Check for a config file