Merge pull request #13607 from michel-thomas/nginx-letsencrypt-ocsp-end-support

fix(nginx): `ssl_stapling` should be `off` with Let's Encrypt

Author: susnux

admin_manual/installation/nginx.rst

@@ -17,6 +17,8 @@ NGINX configuration
 - Adjust the :code:`ssl_certificate` and :code:`ssl_certificate_key` directives to the real paths for your signed 
   certificate and private key. Make sure your SSL certificates are readable by the nginx server process (see `nginx HTTPS SSL 
   Module documentation <https://wiki.nginx.org/HttpSslModule>`_).
+- If using Let's Encrypt as TLS certificate and nginx as webserver, set `ssl_stapling` and `ssl_stapling_verify` to `off`
+  in main nginx config (see [Let's Encrypt blog post](https://letsencrypt.org/2024/12/05/ending-ocsp)).
 - Be careful about line breaks if you copy the examples, as long lines may be
   broken for page display and result in an invalid configuration files.
 - Some environments might need a ``cgi.fix_pathinfo`` set to ``1`` in their