ssl try again

Dockerfile

@@ -4,7 +4,6 @@ FROM nginx
 RUN rm -rf /usr/share/nginx/html/*
 
 RUN apt-get update \
-    && apt upgrade -y \
     && apt-get install nodejs npm -y
 
 WORKDIR /usr/share/nginx/html

docker-compose.yml

@@ -10,10 +10,10 @@ services:
             - ./public:/usr/share/nginx/html
             - ./data/certbot/conf:/etc/letsencrypt
             - ./data/certbot/www:/var/www/certbot
-        command: “/bin/sh -c ‘while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \”daemon off;\”‘”
+        command: "/bin/sh -c 'while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'"
     certbot:
         image: certbot/certbot
         volumes:
             - ./data/certbot/conf:/etc/letsencrypt
             - ./data/certbot/www:/var/www/certbot
-        entrypoint: “/bin/sh -c ‘trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'”
+        entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"

nginx.conf

@@ -43,11 +43,19 @@ http {
 
     server {
         listen 443 ssl;
+        root   /usr/share/nginx/html;
         server_name kuadrado-software.fr www.kuadrado-software.fr;
         index  index.html index.htm;
         ssl_certificate /etc/letsencrypt/live/kuadrado-software.fr/fullchain.pem;
         ssl_certificate_key /etc/letsencrypt/live/kuadrado-software.fr/privkey.pem;
-        include /etc/letsencrypt/options-ssl-nginx.conf;
+
+        # https://github.com/certbot/certbot/blob/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf
+        ssl_session_cache shared:le_nginx_SSL:10m;
+        ssl_session_timeout 1440m;
+        ssl_session_tickets off;
+        ssl_protocols TLSv1.2 TLSv1.3;
+        ssl_prefer_server_ciphers off;
+        ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
         ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
         location / {
             proxy_pass http://kuadrado-software.fr;