ssl = required

[...]

ssl_server_cert_file = /etc/letsencrypt/live/quietlife.nl/fullchain.pem
ssl_server_key_file = /etc/letsencrypt/live/quietlife.nl/privkey.pe

[...]

ssl_min_protocol = TLSv1.2