Look into further hardening of SSL/TLS settings: See: https://www.digitalocean.com/community/questions/https-and-http2-nginx-config-for-socket-io?answer=36354 
