diff --git a/inventory/group_vars/all.yml b/inventory/group_vars/all.yml
index 779226e..9788fd2 100644
--- a/inventory/group_vars/all.yml
+++ b/inventory/group_vars/all.yml
@@ -41,7 +41,7 @@ zerotier_network_id: !vault |
 
 # For geerlingguy.apache
 apache_remove_default_vhost: yes
-apache_ssl_cipher_suite: AES256+EECDH:AES256+EDH
+apache_ssl_cipher_suite: "ECDH:AECDH:!SHA1:!SHA256:!SHA384"
 apache_ssl_protocol: all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
 
 # For geerlingguy.php
diff --git a/playbooks/vars/apache.yml b/playbooks/vars/apache.yml
index ed0822b..97a618b 100644
--- a/playbooks/vars/apache.yml
+++ b/playbooks/vars/apache.yml
@@ -9,6 +9,7 @@ apache_mods_enabled:
   - proxy_fcgi.load
   - proxy_http.load
   - rewrite.load
+  - socache_shmcb.load
   - ssl.load
 apache_mods_disabled:
   - mpm_event.load
@@ -17,6 +18,8 @@ apache_mods_disabled:
 apache_global_vhost_settings: |
   DirectoryIndex index.php index.html
   Protocols h2 http/1.1
+  SSLSessionCache shmcb:/run/apache2/socache
+  SSLSessionCacheTimeout 300
   <FilesMatch \.php$>
   SetHandler "proxy:fcgi://127.0.0.1:9000"
   </FilesMatch>