ssl_certificate      /etc/letsencrypt/live/koalicja.cloud/koalicja.cloud.pem;
        ssl_certificate_key  /etc/letsencrypt/live/koalicja.cloud/koalicja.cloud.key.pem;
        ssl_trusted_certificate /etc/letsencrypt/live/koalicja.cloud/koalicja.cloud.pem;
        ssl_dhparam /usr/local/nginx/dhparam.pem;
        ssl_stapling on;
        ssl_stapling_verify on;
        resolver 8.8.8.8 8.8.4.4 valid=300s;
        resolver_timeout 5s;
        ssl_protocols  TLSv1.2 TLSv1.3;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_ciphers 'kEECDH+ECDSA+AES256:kEECDH+AES256:kEDH+AES256:TLS13-
        AES-128-GCM-SHA256:TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-
        SHA256';
        ssl_prefer_server_ciphers  on;

nginx version: nginx/1.13.8 (koalicja-server) built by gcc 4.8.5 20150623 (Red Hat 4.8.5-16) (GCC) built with OpenSSL 1.1.1-dev  xx XXX xxxx TLS SNI support enabled configure arguments: --add-module=incubator-pagespeed-ngx-1.12.34.3-stable --with-http_gunzip_module --with-http_realip_module --with-threads --with-http_v2_module --with-file-aio --with-openssl=openssl --with-compat --add-module=naxsi/naxsi_src --build=koalicja-server --user=nginx --group=nginx --with-http_ssl_module --with-pcre=pcre-8.38 --with-zlib=zlib-1.2.11