SSL improvements

• Loosen SSL settings a bit (for old browsers), see https://mozilla.github.io/server-side-tls/ssl-config-generator/
• Replace nginx_add_headers (a list) with nginx_http_headers (a dict)
• nginx_http_headers is empty, use to easily override entries in nginx_http_headers_default