Master TLS 1.3 and TLS 1.2, set up your NGINX and use Let's Encrypt for automatic certificate renewal