Collection on all things HTTPS. Includes settings for TLS on nginx (which desperately need an update!).
Until I update this, I'd recommend you take a look at https://github.com/jukbot/setup-nginx-webserver
See https://www.nginx.com/resources/wiki/start/topics/tutorials/install/#official-debian-ubuntu-packages on how to install the lastest version of nginx.
Most settings are sourced from https://bettercrypto.org/static/applied-crypto-hardening.pdf#subsection.2.1.3, https://danpalmer.me/blog/ssl-labs-grade-a, https://gist.github.com/plentz/6737338 and https://scotthelme.co.uk/