diff --git a/snippets/ssl-modern.conf b/snippets/ssl-modern.conf
new file mode 100644
index 0000000000000000000000000000000000000000..f5551228202be749289a61139dc56e0864b132ee
--- /dev/null
+++ b/snippets/ssl-modern.conf
@@ -0,0 +1,3 @@
+include                     snippets/ssl-common.conf;
+ssl_protocols               TLSv1.2 TLSv1.3;
+ssl_ciphers                 HIGH:!NULL:!AES128:!ARIA128:!CAMELLIA128:!SHA1;