diff --git a/autoXRAYselfsteal.sh b/autoXRAYselfsteal.sh
index 9643fa5..208fa76 100644
--- a/autoXRAYselfsteal.sh
+++ b/autoXRAYselfsteal.sh
@@ -39,7 +39,6 @@ server {
     server_name $DOMAIN;
 
     ##Отключить чтобы получить заглушку nginx!
-    #
     root /var/www/$DOMAIN;
     index index.php index.html;
 	
@@ -47,6 +46,8 @@ server {
 	ssl_ciphers HIGH:!aNULL:!MD5;
 	ssl_prefer_server_ciphers on;
 
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:MozSSL:10m;
     ssl_session_tickets off;
 
     ssl_certificate /etc/letsencrypt/live/$DOMAIN/fullchain.pem;
@@ -61,7 +62,14 @@ server {
 server {
     listen 80;
     server_name $DOMAIN;
-    return 301 https://\$host\$request_uri;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/html;
+    }
+
+    location / {
+		return 301 https://\$host\$request_uri;
+    }
 }
 EOF
 
diff --git a/autoXRAYselfstealConfChina.sh b/autoXRAYselfstealConfChina.sh
index f0c3c4e..be710fd 100644
--- a/autoXRAYselfstealConfChina.sh
+++ b/autoXRAYselfstealConfChina.sh
@@ -39,7 +39,6 @@ server {
     server_name $DOMAIN;
 
     ##Отключить чтобы получить заглушку nginx!
-    #
     root /var/www/$DOMAIN;
     index index.php index.html;
 	
@@ -47,11 +46,14 @@ server {
 	ssl_ciphers HIGH:!aNULL:!MD5;
 	ssl_prefer_server_ciphers on;
 
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:MozSSL:10m;
     ssl_session_tickets off;
 
     ssl_certificate /etc/letsencrypt/live/$DOMAIN/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/$DOMAIN/privkey.pem;
-	
+
+
     location ~ /\.ht {
         deny all;
     }
@@ -60,7 +62,14 @@ server {
 server {
     listen 80;
     server_name $DOMAIN;
-    return 301 https://\$host\$request_uri;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/html;
+    }
+
+    location / {
+		return 301 https://\$host\$request_uri;
+    }
 }
 EOF
 
diff --git a/autoXRAYselfstealConfRU.sh b/autoXRAYselfstealConfRU.sh
index 46d2087..e309e04 100644
--- a/autoXRAYselfstealConfRU.sh
+++ b/autoXRAYselfstealConfRU.sh
@@ -39,7 +39,6 @@ server {
     server_name $DOMAIN;
 
     ##Отключить чтобы получить заглушку nginx!
-    #
     root /var/www/$DOMAIN;
     index index.php index.html;
 	
@@ -47,11 +46,14 @@ server {
 	ssl_ciphers HIGH:!aNULL:!MD5;
 	ssl_prefer_server_ciphers on;
 
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:MozSSL:10m;
     ssl_session_tickets off;
 
     ssl_certificate /etc/letsencrypt/live/$DOMAIN/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/$DOMAIN/privkey.pem;
 
+
     location ~ /\.ht {
         deny all;
     }
@@ -60,7 +62,14 @@ server {
 server {
     listen 80;
     server_name $DOMAIN;
-    return 301 https://\$host\$request_uri;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/html;
+    }
+
+    location / {
+		return 301 https://\$host\$request_uri;
+    }
 }
 EOF
 
diff --git a/autoXRAYselfstealConfRUbrEU.sh b/autoXRAYselfstealConfRUbrEU.sh
index 8b848ba..6bd30b6 100644
--- a/autoXRAYselfstealConfRUbrEU.sh
+++ b/autoXRAYselfstealConfRUbrEU.sh
@@ -102,6 +102,7 @@ server {
     listen 127.0.0.1:3333 ssl http2 proxy_protocol;
     server_name $DOMAIN;
 
+    ##Отключить чтобы получить заглушку nginx!
     root /var/www/$DOMAIN;
     index index.php index.html;
 	
@@ -109,11 +110,13 @@ server {
 	ssl_ciphers HIGH:!aNULL:!MD5;
 	ssl_prefer_server_ciphers on;
 
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:MozSSL:10m;
     ssl_session_tickets off;
 
     ssl_certificate /etc/letsencrypt/live/$DOMAIN/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/$DOMAIN/privkey.pem;
-	
+
 
     location ~ /\.ht {
         deny all;
@@ -123,7 +126,14 @@ server {
 server {
     listen 80;
     server_name $DOMAIN;
-    return 301 https://\$host\$request_uri;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/html;
+    }
+
+    location / {
+		return 301 https://\$host\$request_uri;
+    }
 }
 EOF