diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 9124b498..aed7aed2 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -43,6 +43,7 @@ http {
     ssl_protocols TLSv1.2 TLSv1.3;
     ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256;
     ssl_prefer_server_ciphers on;
+    ssl_conf_command Options PrioritizeChaCha;
 
     ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;