diff --git a/configuration.nix b/configuration.nix
index 4b164fe..e3516ac 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -343,16 +343,7 @@
   {
     enable = true;
     enableReload = true;
-    commonHttpConfig = ''
-      # recommendedTlsSettings  = true;
-      # android doesn't like this one:
-      # ssl_ecdh_curve secp384r1;
-      ssl_session_cache shared:SSL:42m;
-      ssl_session_timeout 23m;
-      ssl_prefer_server_ciphers on;
-      ssl_stapling on;
-      ssl_stapling_verify on;
-    '';
+    recommendedTlsSettings   = true;
     recommendedGzipSettings  = true;
     recommendedProxySettings = true;