gerrit - remove DHE ciphers

though already deactivated with !DH,
still remove these ciphers:

DHE-RSA-AES128-GCM-SHA256:kEDH+AESGCM

as explained in I39b389b63ae6b8 it was an oversight,
and we just copied from the nginx cluster config
for misc. services

Change-Id: If03866d91fa92985b3b2e0821e751e3ae8a7d951
Merge "gerrit - remove DHE ciphers" into production