diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index a1d5ac40..84aff11e 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -1,4 +1,4 @@
-# nginx 1.24.x
+# nginx 1.26.x
 
 load_module modules/ngx_http_brotli_static_module.so;
 
@@ -140,8 +140,9 @@ http {
     }
 
     server {
-        listen 443 default_server ssl http2 backlog=4096;
-        listen [::]:443 default_server ssl http2 backlog=4096;
+        listen 443 default_server ssl backlog=4096;
+        listen [::]:443 default_server ssl backlog=4096;
+        http2 on;
         ssl_reject_handshake on;
 
         # https://trac.nginx.org/nginx/ticket/2012
@@ -151,8 +152,9 @@ http {
     }
 
     server {
-        listen 443 ssl http2;
-        listen [::]:443 ssl http2;
+        listen 443 ssl;
+        listen [::]:443 ssl;
+        http2 on;
         server_name www.grapheneos.org grapheneos.app www.grapheneos.app grapheneos.ca www.grapheneos.ca grapheneos.com www.grapheneos.com grapheneos.dev www.grapheneos.dev grapheneos.foundation www.grapheneos.foundation grapheneos.info www.grapheneos.info grapheneos.net www.grapheneos.net grapheneos.ovh www.grapheneos.ovh grapheneos.page www.grapheneos.page;
 
         keepalive_timeout 3m;
@@ -167,8 +169,9 @@ http {
     }
 
     server {
-        listen 443 ssl http2;
-        listen [::]:443 ssl http2;
+        listen 443 ssl;
+        listen [::]:443 ssl;
+        http2 on;
         server_name www.vanadium.app;
 
         keepalive_timeout 3m;
@@ -183,8 +186,9 @@ http {
     }
 
     server {
-        listen 443 ssl http2;
-        listen [::]:443 ssl http2;
+        listen 443 ssl;
+        listen [::]:443 ssl;
+        http2 on;
         server_name vanadium.app;
 
         keepalive_timeout 3m;
@@ -204,8 +208,9 @@ http {
     }
 
     server {
-        listen 443 ssl http2;
-        listen [::]:443 ssl http2;
+        listen 443 ssl;
+        listen [::]:443 ssl;
+        http2 on;
         server_name grapheneos.org;
 
         include root_grapheneos.org.conf;