Networking wizards of nostr,

I have a guide that explains how to serve your BTCPayServer at a domain using a Tailscale reverse proxy.

It works but I am not a networking expert. What are your recommended settings for ssl in nginx beyond what is used in this guide https://docs.btcpayserver.org/FAQ/Deployment/#can-i-use-an-existing-nginx-server-as-a-reverse-proxy-with-ssl-termination?