diff --git a/roles/wordpress-setup/templates/no-default.conf.j2 b/roles/wordpress-setup/templates/no-default.conf.j2
index 8bd1a85e98..6a047dee7b 100644
--- a/roles/wordpress-setup/templates/no-default.conf.j2
+++ b/roles/wordpress-setup/templates/no-default.conf.j2
@@ -19,5 +19,6 @@ server {
   listen 443 ssl default_server deferred;
 
   ssl_reject_handshake on;
+  include h5bp/directive-only/ssl.conf;
 }
 {% endif %}