# Make sure to include the necessary modules for QUIC and HTTP/3
load_module modules/ngx_http_v3_module.so;

http {
    # Enable HTTP/3
    http3 {
        # Specify the ALPN protocol
        alpn h3-23;
    }
    
    server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;

        # Enable QUIC and HTTP/3
        listen 443 quic reuseport;
        listen [::]:443 quic reuseport;

        # SSL configuration
        ssl_certificate /path/to/your/cert.pem;
        ssl_certificate_key /path/to/your/key.pem;
        ssl_protocols TLSv1.3;
        ssl_prefer_server_ciphers off;
        
        # QUIC and HTTP/3 configuration
        ssl_early_data on;
        ssl_protocols TLSv1.3;
        ssl_ciphers 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256';

        # ALPN protocols
        http3;
        add_header Alt-Svc 'h3-23=":443"';
        add_header QUIC-Status $quic_status;
        
        # Reverse proxy configuration
        location / {
            proxy_pass http://backend-server;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
    }
}