Provide TLS 1.3 only nginx configuration

Summary:
The aeris CryptCheck service rates 'E' the current Mozilla intermediate
configuration.

This change provide a more modern configuration supporting only TLS 1.3
for services requiring strong security while blocking legacy clients.

Ref T1228.

Test Plan: nginx -t

Reviewers: dereckson

Reviewed By: dereckson

Maniphest Tasks: T1228

Differential Revision: https://devcentral.nasqueron.org/D3251