nginx 启用http3

前提条件：

• 开启udp访问端口，我开了443的udp

配置如下：

server {
    listen 443 quic reuseport;
    listen [::]:443 quic reuseport;
    listen 443 ssl;
    listen [::]:443 ssl;
    http2 on;
    http3 on;
    http3_hq on;
    resolver 223.5.5.5;
    ssl_certificate /path/to/certificate/h2c.tech.crt;
    ssl_certificate_key /path/to/certificate/h2c.tech.key;
    ssl_protocols TLSv1.3;
    ssl_ciphers TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+ECDSA+AES128:EECDH+aRSA+AES128:RSA+AES128:EECDH+ECDSA+AES256:EECDH+aRSA+AES256:RSA+AES256:EECDH+ECDSA+3DES:EECDH+aRSA+3DES:RSA+3DES:!MD5;
    server_name h2c.tech;

    index index.html index.htm;
    error_page 400 = /400.html;
    server_tokens off;

    # Config for 0-RTT in TLSv1.3
    ssl_early_data on;
    ssl_stapling on;
    ssl_stapling_verify on;

    quic_retry on;
    quic_gso on;
    # Quic或HTTP/3响应头
    add_header Alt-Svc 'h3=":443"; ma=2592000,h3-29=":443"; ma=2592000';
    # HSTS
    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";

    location / {
        proxy_redirect off;
        proxy_pass http://127.0.0.1:1313;
        proxy_http_version 1.1;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        # 由于h3去掉了Host, 但是我后端没有Host会报错，所以自己设置下。
        proxy_set_header Host 'h2c.tech';

        # Config for 0-RTT in TLSv1.3
        proxy_set_header Early-Data $ssl_early_data;
    }
}

server {
    listen 80;
    listen [::]:80;
    server_name h2c.tech;
    return 301 https://h2c.tech/$request_uri;
}