ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers EECDH+AES:+AES128:+AES256:+SHA; ssl_prefer_server_ciphers on; ssl_ecdh_curve secp384r1;
add_header Strict-Transport-Security "max-age=31536000";
à adapter à votre serveur web.