Add back TLSv1.2

 $def with (dhparam_location)
-ssl_protocols              TLSv1.3;
+ssl_protocols              TLSv1.2 TLSv1.3;
 ssl_prefer_server_ciphers  on;
 ssl_dhparam                $dhparam_location; 
 ssl_ciphers                EECDH+AESGCM:EDH+AESGCM;