Source: nginx Severity: wishlist nginx could ship with /etc/nginx/snippets/ssl-strong.conf that contains strong SSL options that can be included easily.
Currently at least mailman3 ships with /etc/mailman3/nginx.conf containing SSL options. It would be a good idea to provide these in one place and just include in other packages. Perhaps consider relevant parts of https://cipherli.st/