Recommended server TLS config
> There seems to be a need for a central page somewhere that says, quite
> simply:
> What protocols are safe
> How to configure popular software to use those protocols
https://wiki.mozilla.org/Security/Server_Side_TLS
is a good start