http {

    ...
    
    ssl_protocols TLSv1.2 TLSv1.3; 
    ssl_prefer_server_ciphers on;
    
    ...
    
}