Explicitly control nginx dhparams

We want to ensure that any client that falls back to DH gets a
reasonably strong encryption experience. Default for nginx is 1024 bits
which is too weak.