An example nginx config with ssl using modern cryptography

nginx-ssl-modern-cryptography.conf

server {
  listen       443 ssl default;

  ssl_certificate      /etc/nginx/bundle.crt;
  ssl_certificate_key  /etc/nginx/privkey.pem;

  ssl_session_cache shared:SSL:1m;
  ssl_session_timeout  5m;

  ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
  ssl_prefer_server_ciphers   on;
}