diff --git a/web/nginx.conf b/web/nginx.conf
index 9a8b5cf9f094a91fa94ec92ca65c271a9420576c..af769667867259144eb633006deaa166b181a51a 100644
--- a/web/nginx.conf
+++ b/web/nginx.conf
@@ -27,9 +27,8 @@ http {
             ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
             ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
 
-            ssl_session_cache shared:SSL:1m;
-            ssl_session_timeout  10m;
-            ssl_ciphers HIGH:!aNULL:!MD5;
+            ssl_protocols TLSv1.2 TLSv1.3;
+            ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384';
             ssl_prefer_server_ciphers on;
 
             location / {