Harden SSL config

Per:

https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers

This config gets an 'A' grade from the Qualys SSL Server Test.