Use the modern SSL configuration.

conf.d/auth.shore.co.il.conf

@@ -21,7 +21,7 @@ server {
     include     snippets/robots-disallow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
 
 
     location / {

conf.d/code.shore.co.il.conf

@@ -18,7 +18,7 @@ server {
     include     snippets/robots-disallow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
 
     # The following was copied (and modified) from
     # https://www.collaboraoffice.com/code/nginx-reverse-proxy/.

conf.d/git.shore.co.il.conf

@@ -18,7 +18,7 @@ server {
     include     snippets/robots-allow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
 
     location / {
         proxy_pass              http://$git$request_uri;

conf.d/lam.shore.co.il.conf

@@ -18,7 +18,7 @@ server {
     include     snippets/robots-disallow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
 
     location / {
         proxy_pass              http://$lam$request_uri;

conf.d/nextcloud.shore.co.il.conf

@@ -18,7 +18,7 @@ server {
     include     snippets/robots-disallow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
     include     snippets/nextcloud-well-known.conf;
 
     location / {

conf.d/sogo.shore.co.il.conf

@@ -18,7 +18,7 @@ server {
     include     snippets/robots-disallow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
 
     location    /       { return 301 https://$host/SOGo/; }
     location    /SOGo   { return 301 https://$host/SOGo/; }

conf.d/vouch.shore.co.il.conf

@@ -18,7 +18,7 @@ server {
     include     snippets/robots-disallow-all.conf;
     include     snippets/ads-txt.conf;
     include     snippets/security-txt.conf;
-    include     snippets/ssl-legacy.conf;
+    include     snippets/ssl-modern.conf;
 
     location / {
         proxy_pass              http://$vouch:9090;