diff --git a/webserver/templates/nginx-proxy.conf b/webserver/templates/nginx-proxy.conf
index c9b99746971e6b5c8ab42528cbac7c72a0c7641c..8decc0ea0325c6434ec235de3c60eab124a2ce96 100644
--- a/webserver/templates/nginx-proxy.conf
+++ b/webserver/templates/nginx-proxy.conf
@@ -59,6 +59,12 @@ http {
     ##
     # SSL Settings
     ##
+    ssl_protocols {{protocols[cipher_strength]}};
+    ssl_prefer_server_ciphers {{'on' if prefer_server_ciphers[cipher_strength] else 'off'}};
+    {% if ciphers[cipher_strength] is not none %}
+    ssl_ciphers '{{ciphers[cipher_strength]}}';
+    {% endif %}
+
     ssl_session_timeout 1d;
     ssl_session_cache shared:SSL:50m;
     ssl_session_tickets off;
diff --git a/webserver/templates/ssl-certificate b/webserver/templates/ssl-certificate
index 5ddb5e2de9081cc0696d42b3ca804ca8b30a081a..50f33900ae595e63558897e952ce0866a7eb0392 100644
--- a/webserver/templates/ssl-certificate
+++ b/webserver/templates/ssl-certificate
@@ -1,10 +1,3 @@
     ssl_certificate {{server.certificate|default("/etc/ssl/acmebot/cert/" + server.server_name + ".pem")}};
     ssl_trusted_certificate {{server.certificate|default("/etc/ssl/acmebot/cert/" + server.server_name + ".pem")}};
     ssl_certificate_key {{server.private_key|default("/etc/ssl/acmebot/privkey/" + server.server_name + ".pem")}};
-
-    {% set strength = server.cipher_strength|default(cipher_strength) %}
-    ssl_protocols {{protocols[strength]}};
-    ssl_prefer_server_ciphers {{'on' if prefer_server_ciphers[strength] else 'off'}};
-    {% if ciphers[strength] is not none %}
-    ssl_ciphers '{{ciphers[strength]}}';
-    {% endif %}