improved ssl config

Score an A+ with https://www.ssllabs.com/ssltest/ (if you have a good
certificate, that is)