Dude your config is FUBAR. Why enforce TLS1.3 when you don’t understand that the way cipher suites are negotiated changed in TLS 1.3?
> Also, my server decides the selection of algorithms in TLSv1.3, not the web browsers
SMH. Either use Caddy with an empty config file or follow Mozilla’s recommendation: https://ssl-config.mozilla.org/#server=nginx&version=1.17.7&...
# modern configuration
ssl_protocols TLSv1.3;
ssl_prefer_server_ciphers off;