diff --git a/ubuntu/site.yml b/ubuntu/site.yml
index 6a0e951..145a908 100644
--- a/ubuntu/site.yml
+++ b/ubuntu/site.yml
@@ -222,6 +222,7 @@
       upstream:
         - upstream php { server unix:/run/php/php7.0-fpm.sock; }
       ssl:
-        - ssl_protocols TLSv1 TLSv1.1 TLSv1.2
+        - ssl_protocols TLSv1.2
         - ssl_prefer_server_ciphers on
+        - ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256'
         - ssl_dhparam "/etc/nginx/dhparams.pem"