diff --git a/snippets/ssl-modern.conf b/snippets/ssl-modern.conf
index 3b4adf052f4c44353a175754512be964f836d36e..ac45af1c31a2fb3035ce1c0397427a74389bbe71 100644
--- a/snippets/ssl-modern.conf
+++ b/snippets/ssl-modern.conf
@@ -1,4 +1,4 @@
 # vim: ft=nginx
 include                     snippets/ssl-common.conf;
 ssl_protocols               TLSv1.2 TLSv1.3;
-ssl_ciphers                 HIGH:!NULL:!AES128:!ARIA128:!CAMELLIA128:!SHA1:!kRSA;
+ssl_ciphers                 CHACHA20:DHE:ECDHE:!NULL:!AES128:!ARIA128:!CAMELLIA128:!SHA1:!kRSA;