# SSL/TLS support: yes, no, required.
ssl = required

[...]

# PEM encoded X.509 SSL/TLS certificate and private key.
ssl_cert = </etc/letsencrypt/live/quietlife.nl/fullchain.pem 
ssl_key = </etc/letsencrypt/live/quietlife.nl/privkey.pem

[...]

# DH parameters length to use
ssl_dh_parameters_length = 2048

# SSL protocols (not) to use
ssl_protocols = !SSLv3 !TLSv1 !TLSv1.1

# SSL ciphers to use
ssl_cipher_list = AES384+EECDH:AES384+EDH:AES256+EECDH:AES256+EDH

# Prefer the server's order of ciphers over client's
ssl_prefer_server_ciphers = yes