server { listen [::]:443 ssl http2 fastopen=256; … }