# /etc/apache2/conf-available/modern-ssl.conf

<IfModule mod_ssl.c>
	SSLCipherSuite EECDH+AESGCM:EDH+AESGCM
	SSLCompression off
	SSLHonorCipherOrder on
	SSLOpenSSLConfCmd Curves X25519:prime256v1
</IfModule>