diff --git a/internal/ingress/controller/template/template.go b/internal/ingress/controller/template/template.go
index 7410ce6e0..68ab1b660 100644
--- a/internal/ingress/controller/template/template.go
+++ b/internal/ingress/controller/template/template.go
@@ -1502,12 +1502,8 @@ func httpsListener(addresses []string, co string, tc *config.TemplateConfig) []s
 		}
 
 		lo = append(lo, co, "ssl")
-
-		if tc.Cfg.UseHTTP2 {
-			lo = append(lo, "http2")
-		}
-
 		lo = append(lo, ";")
+
 		out = append(out, strings.Join(lo, " "))
 	}
 
diff --git a/rootfs/etc/nginx/template/nginx.tmpl b/rootfs/etc/nginx/template/nginx.tmpl
index 500a212b6..d58be2880 100644
--- a/rootfs/etc/nginx/template/nginx.tmpl
+++ b/rootfs/etc/nginx/template/nginx.tmpl
@@ -658,6 +658,10 @@ http {
     server {
         server_name {{ buildServerName $server.Hostname }} {{range $server.Aliases }}{{ . }} {{ end }};
 
+        {{ if $cfg.UseHTTP2 }}
+            http2 on;
+        {{ end }}
+
         {{ if gt (len $cfg.BlockUserAgents) 0 }}
         if ($block_ua) {
            return 403;