NGINX security hardening

[axl89]

Improve NGINX security with the typical stuff:

• Only use strong cipher suites
• Prefer server ciphers
• Maybe DH?
• Maybe OCSP stapling?
• Maybe HTTP Strict Transport Security?
• Some basic headers I might be forgetting about? (i.e: clickjacking, XSS, etc.)
• The ssl_session_cache variable