Qualys SSL Labs test is the best and most comprehensive website SSL test available online. At the moment of finishing this write-up, nginx configuration results in beautiful A+ score in this suite.

HSTS

Note that HSTS (HTTP Strict Transport Security) is required for A+ and there is a comment on this in ssl.conf file included by nginx.conf.

Post:

Self hosting WordPress securely in 2018 on FreeBSD with nginx, PHP 7.2, ModSecurity, brotli, Let’s Encrypt SSL