I happened across this tool to help you create configs, it looks pretty good, easier than piecing together all the parameters separately: www.digitalocean.com/community/tools/nginx Seems like it has directions for certbot and generating dhparams, etc. as well.