diff --git a/cfg/ngx/wa.fo.conf b/cfg/ngx/wa.fo.conf
index 292a3fc..ad96779 100644
--- a/cfg/ngx/wa.fo.conf
+++ b/cfg/ngx/wa.fo.conf
@@ -38,8 +38,9 @@ server {
 
 # * ➔ bare domain (https)
 server {
-    listen 443 ssl http2;
-    listen [::]:443 ssl http2;
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
 
     ssl_certificate /etc/nginx/acme.sh/wa.fo/fullchain.pem;
     ssl_certificate_key /etc/nginx/acme.sh/wa.fo/key.pem;