diff --git a/oss/nginx_base/proxy/default.conf b/oss/nginx_base/proxy/default.conf
index 38977fc..17f2b7d 100644
--- a/oss/nginx_base/proxy/default.conf
+++ b/oss/nginx_base/proxy/default.conf
@@ -4,15 +4,14 @@ server {
 }
 
 server {
-    listen       443;
+    listen 443 ssl;
     server_name  localhost;
     ssl_certificate           /etc/nginx/cert.crt;
     ssl_certificate_key       /etc/nginx/cert.key;
     ssl_verify_client optional_no_ca;
 
-    ssl on;
     ssl_session_cache  builtin:1000  shared:SSL:10m;
-    ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
+    ssl_protocols TLSv1.3 TLSv1.2;
     ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
     ssl_prefer_server_ciphers on;