server {
    listen 443 ssl;

    server_name myweb.io www.myweb.io;

    ssl_certificate /etc/letsencrypt/live/myweb.io/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/myweb.io/privkey.pem;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/ssl/certs/dhparam.pem;
    ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:... ...