There is a lot of information out there on hardening nginx, including this Mozilla guide on ssl configuration, which I would highly…