diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 1e0a426a..ecc8494d 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -41,9 +41,11 @@ http {
 
     ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
+
     ssl_session_cache shared:SSL:10m;
     ssl_session_timeout 1d;
     ssl_session_tickets off;
+    ssl_buffer_size 4k;
 
     ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
     ssl_stapling on;