diff --git a/afpy.org.yml b/afpy.org.yml
index 1b7be41..cf224fe 100644
--- a/afpy.org.yml
+++ b/afpy.org.yml
@@ -53,7 +53,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name afpy.org;
               access_log /var/log/nginx/afpy.org-access.log;
               error_log /var/log/nginx/afpy.org-error.log;
@@ -63,7 +63,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name www.afpy.org;
               access_log /var/log/nginx/afpy.org-access.log;
               error_log /var/log/nginx/afpy.org-error.log;
@@ -218,7 +218,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name afpyro.afpy.org;
               access_log /var/log/nginx/afpyro.afpy.org-access.log;
               error_log /var/log/nginx/afpyro.afpy.org-error.log;
@@ -261,7 +261,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name lists.afpy.org;
               access_log /var/log/nginx/lists.afpy.org-access.log;
               error_log /var/log/nginx/lists.afpy.org-error.log;
@@ -287,7 +287,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name photos.afpy.org;
               access_log /var/log/nginx/photos.afpy.org-access.log;
               error_log /var/log/nginx/photos.afpy.org-error.log;
diff --git a/autoconfig.yml b/autoconfig.yml
index 92a248f..5691cd8 100644
--- a/autoconfig.yml
+++ b/autoconfig.yml
@@ -26,7 +26,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name autoconfig.afpy.org autoconfig.pycon.fr;
               access_log /var/log/nginx/autoconfig.afpy.org-access.log;
               error_log /var/log/nginx/autoconfig.afpy.org-error.log;
diff --git a/dl.yml b/dl.yml
index dd465cd..b95364a 100644
--- a/dl.yml
+++ b/dl.yml
@@ -74,7 +74,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name videos-2015.pycon.fr;
               access_log /var/log/nginx/videos-2015.pycon.fr-access.log;
               error_log /var/log/nginx/videos-2015.pycon.fr-error.log;
@@ -84,7 +84,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name dl.afpy.org;
               charset utf-8;
               access_log /var/log/nginx/dl.afpy.org-access.log;
diff --git a/logs.afpy.org.yml b/logs.afpy.org.yml
index e1c32ce..4ff34c9 100644
--- a/logs.afpy.org.yml
+++ b/logs.afpy.org.yml
@@ -24,7 +24,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name logs.afpy.org;
               access_log /var/log/nginx/logs.afpy.org-access.log;
               error_log /var/log/nginx/logs.afpy.org-error.log;
diff --git a/makemake.yml b/makemake.yml
index b8400c3..fe86225 100644
--- a/makemake.yml
+++ b/makemake.yml
@@ -58,7 +58,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name planet.afpy.org;
               access_log /var/log/nginx/planet.afpy.org-access.log;
               error_log /var/log/nginx/planet.afpy.org-error.log;
diff --git a/munin.yml b/munin.yml
index af6c911..135e214 100644
--- a/munin.yml
+++ b/munin.yml
@@ -13,8 +13,8 @@
 
       server
       {
-          listen 443 ssl;
-          listen [::]:443 ssl;
+          listen 443 ssl http2;
+          listen [::]:443 ssl http2;
           server_name {{ nginx_domain }};
           root /var/cache/munin/www;
           index index.html;
diff --git a/ponyconf.yml b/ponyconf.yml
index c1e61a3..305befa 100644
--- a/ponyconf.yml
+++ b/ponyconf.yml
@@ -55,7 +55,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name cfp.pycon.fr;
               access_log /var/log/nginx/cfp.pycon.fr-access.log;
               error_log /var/log/nginx/cfp.pycon.fr-error.log;
@@ -82,7 +82,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name {{ item.domain }};
               access_log /var/log/nginx/{{ item.domain }}-access.log;
               error_log /var/log/nginx/{{ item.domain }}-error.log;
diff --git a/pycon.fr.yml b/pycon.fr.yml
index 05ba999..07d54d8 100644
--- a/pycon.fr.yml
+++ b/pycon.fr.yml
@@ -33,7 +33,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name pycon.fr;
               access_log /var/log/nginx/pycon.fr-access.log;
               error_log /var/log/nginx/pycon.fr-error.log;
@@ -43,7 +43,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name www.pycon.fr;
               access_log /var/log/nginx/pycon.fr-access.log;
               error_log /var/log/nginx/pycon.fr-error.log;
@@ -87,7 +87,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name 2016.pycon.fr;
               access_log /var/log/nginx/2016.pycon.fr-access.log;
               error_log /var/log/nginx/2016.pycon.fr-error.log;
@@ -113,7 +113,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name 2012.pycon.fr;
               access_log /var/log/nginx/2012.pycon.fr-access.log;
               error_log /var/log/nginx/2012.pycon.fr-error.log;
@@ -138,7 +138,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name 2011.pycon.fr;
               access_log /var/log/nginx/2011.pycon.fr-access.log;
               error_log /var/log/nginx/2011.pycon.fr-error.log;
@@ -163,7 +163,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name 2010.pycon.fr;
               access_log /var/log/nginx/2010.pycon.fr-access.log;
               error_log /var/log/nginx/2010.pycon.fr-error.log;
@@ -191,7 +191,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               charset utf-8;
               server_name paullaroid.pycon.fr;
               access_log /var/log/nginx/paullaroid.pycon.fr-access.log;
@@ -219,7 +219,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name fr.pycon.org;
               access_log /var/log/nginx/fr.pycon.org-access.log;
               error_log /var/log/nginx/fr.pycon.org-error.log;
diff --git a/pydocteur.afpy.org.yml b/pydocteur.afpy.org.yml
index 7b7d932..496477b 100644
--- a/pydocteur.afpy.org.yml
+++ b/pydocteur.afpy.org.yml
@@ -29,7 +29,7 @@
 
           server
           {
-              listen [::]:443 ssl; listen 443 ssl;
+              listen [::]:443 ssl http2; listen 443 ssl http2;
               server_name pydocteur.afpy.org;
               access_log /var/log/nginx/pydocteur.afpy.org-access.log;
               error_log /var/log/nginx/pydocteur.afpy.org-error.log;
diff --git a/roles/discourse/tasks/main.yml b/roles/discourse/tasks/main.yml
index 040147b..9bcfcf0 100644
--- a/roles/discourse/tasks/main.yml
+++ b/roles/discourse/tasks/main.yml
@@ -27,7 +27,7 @@
 
       server
       {
-          listen [::]:443 ssl; listen 443 ssl;
+          listen [::]:443 ssl http2; listen 443 ssl http2;
           server_name {{ discourse_domain }};
           access_log /var/log/nginx/{{ discourse_domain }}-access.log;
           error_log /var/log/nginx/{{ discourse_domain }}-error.log;
diff --git a/roles/gitea/tasks/setup.yml b/roles/gitea/tasks/setup.yml
index 5ef0e55..404be5e 100644
--- a/roles/gitea/tasks/setup.yml
+++ b/roles/gitea/tasks/setup.yml
@@ -127,7 +127,7 @@
 
       server
       {
-          listen [::]:443 ssl; listen 443 ssl;
+          listen [::]:443 ssl http2; listen 443 ssl http2;
           server_name git.afpy.org;
           access_log /var/log/nginx/git.afpy.org-access.log;
           error_log /var/log/nginx/git.afpy.org-error.log;
diff --git a/roles/nginx/defaults/main.yml b/roles/nginx/defaults/main.yml
index bacc45b..cf1a97c 100644
--- a/roles/nginx/defaults/main.yml
+++ b/roles/nginx/defaults/main.yml
@@ -15,7 +15,7 @@ nginx_conf: |
 
   server
   {
-      listen [::]:443 ssl; listen 443 ssl;
+      listen [::]:443 ssl http2; listen 443 ssl http2;
       charset utf-8;
       server_name {{ nginx_domain }};
       access_log /var/log/nginx/{{ nginx_domain }}-access.log;