TLS 1.0 hiding in an include
The main TLS settings look fine, but one server block includes an old snippet. Follow nginx includes to find the site that still allows TLS 1.0 and a 3DES cipher.
Briefing
A compliance scan says one hostname on the edge proxy accepts TLS 1.0. nginx.conf sets modern protocols, so the scan must be wrong, says the ticket.
nginx lets a server block override http-level settings, and include pulls in other files. grep -r across /etc/nginx finds every place a directive is set.
edge-01 · Web config review
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.