Didn't know about setting DH parameters.

On each server, do the following:

    sudo openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

Then in nginx.conf set:

    http {
        ssl_dhparam /etc/nginx/ssl/dhparam.pem;
    }