diff --git a/webserver/templates/sites/hostnamerewrite.conf b/webserver/templates/sites/hostnamerewrite.conf
index b6829139a5bd945ddb68ed4739d9142ddcc19329..a933886d38e86d5b5dc069ddebc10a51f7321cb1 100644
--- a/webserver/templates/sites/hostnamerewrite.conf
+++ b/webserver/templates/sites/hostnamerewrite.conf
@@ -1,6 +1,6 @@
 server {
     listen 80;
-    listen 443 ssl;
+    listen 443 ssl http2;
     server_name {{server.forward_hostnames.hostnames|default(server.forward_hostnames)|join(" ")}};
     error_log /var/log/nginx/rewrite-error-{{server.forward_hostnames.hostnames|default(server.forward_hostnames)|first}}.log;
     {% if server.buffer_access_log|default(webserver_buffer_access_log|default(False)) %}
diff --git a/webserver/templates/sites/iprewrite.conf b/webserver/templates/sites/iprewrite.conf
index dc9c2a52413d20d32324eab1529beb902d9a4021..0984b602a3525c5a15c186a537e0b5cd69370910 100644
--- a/webserver/templates/sites/iprewrite.conf
+++ b/webserver/templates/sites/iprewrite.conf
@@ -1,6 +1,6 @@
 server {
     listen 80 {{ 'reuseport' if webserver_enable_reuseport and not webserver_enable_acme_default else '' }};
-    listen 443 ssl {{ 'reuseport' if webserver_enable_reuseport else '' }};
+    listen 443 ssl http2 {{ 'reuseport' if webserver_enable_reuseport else '' }};
     server_name {{ansible_all_ipv4_addresses|join(" ")}};
     error_log /var/log/nginx/rewrite-error-{{ansible_all_ipv4_addresses|first}}.log;
     {% if server.buffer_access_log|default(webserver_buffer_access_log|default(False)) %}
diff --git a/webserver/templates/sites/tlsproxy.conf b/webserver/templates/sites/tlsproxy.conf
index 8dc832866d5c1ebaec4af3e87d6526c08ea731b3..5afbc8773afa4679129b376eff13662d291ed1c5 100644
--- a/webserver/templates/sites/tlsproxy.conf
+++ b/webserver/templates/sites/tlsproxy.conf
@@ -1,5 +1,5 @@
 server {
-    listen {% if server.no_ssl is undefined or not server.no_ssl %}443 ssl{% else %}80{% endif %};
+    listen {% if server.no_ssl is undefined or not server.no_ssl %}443 ssl http2{% else %}80{% endif %};
     server_name {{server.server_names|default([server.server_name])|join(" ")}};
     error_log /var/log/nginx/proxy-error-{{server.server_names|default([server.server_name])|first}}.log;
     {% if server.buffer_access_log|default(webserver_buffer_access_log|default(False)) %}