Improve Nginx config to support TLS 1.2