Thanks Ray, the SSL Configuration Generator looks really good and modern config is what I was looking for, I guess. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280475,280487#msg-280487