- adds ssl_ecdh_curve, per https://github.com/mozilla/ssl-config-generator/issues/76 - removes ssl_stapling, after Let's Encrypt ended support for OCSP stapling https://letsencrypt.org/2024/12/05/ending-ocsp/, enabling ssl_stapling leads to warning log spam: ``` ssl_stapling" ignored, no OCSP responder URL in the certificate "<cert-directory> ```