I was getting a B rating when testing my newly Let’s Encrypted site with Qualys SSL Labs. The solution was to add a strong DH group to NGINX – here’s how to do it.