diff --git a/conf.d/elasticsearch.shore.co.il.conf b/conf.d/elasticsearch.shore.co.il.conf
index de4822fb8f17205304253eeb5b16fb34a9b01151..6a60200604953f26846a8c9a9cedde25f1fd5851 100644
--- a/conf.d/elasticsearch.shore.co.il.conf
+++ b/conf.d/elasticsearch.shore.co.il.conf
@@ -19,7 +19,7 @@ server {
     include     snippets/robots-disallow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
 
     location / {
         proxy_pass              http://$es:9200$request_uri;
diff --git a/conf.d/kibana.shore.co.il.conf b/conf.d/kibana.shore.co.il.conf
index 405d914bd28f750ee9929c861aaae95a6cf1e5bb..46edfee2a6270975fdf8d9ba5406db537ea15fcf 100644
--- a/conf.d/kibana.shore.co.il.conf
+++ b/conf.d/kibana.shore.co.il.conf
@@ -19,7 +19,7 @@ server {
     include     snippets/robots-disallow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
     include     snippets/vouch.conf;
 
     location / {
diff --git a/conf.d/registry.shore.co.il.conf b/conf.d/registry.shore.co.il.conf
index c6fa35542f8d17ed9620d0b50ea125f7c9ef724e..d2693728e0902cc5f68dfdfa4fb987f4ce4ab2b5 100644
--- a/conf.d/registry.shore.co.il.conf
+++ b/conf.d/registry.shore.co.il.conf
@@ -14,7 +14,7 @@ server {
     listen      443 ssl http2;
     listen      [::]:443 ssl http2;
     server_name registry.shore.co.il;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
 
     location /v2/ {
         proxy_pass                  http://$registry:5000$request_uri;