- Don't advertise NGINX version. - Comply with last Mozilla TLS Guidelines, for modern configuration. - More comments for better readability.