Default is 1024 and this is to low

https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html

 

cd /etc/ssl/certs
openssl dhparam -out dhparam.pem 4096

added to your nginx.conf

ssl_dhparam /etc/ssl/certs/dhparam.pem;