Please disable the outdated TLS 1.0 and TLS 1.1 versions. Please enable TLS 1.3.
For the server configuration just follow the mozilla modern config: https://ssl-config.mozilla.org/#server=nginx&server-version=1.17.0&config=modern