Great job, but I noticed that the server gets just a B rating (ssllabs) due to:

    - rc4 acceptance
    - Session resumption (caching) No (IDs empty)
    - no OCSP stapling
    - Next Protocol Negotiation (NPN) Yes, but not signalling a http/1.1 fallback

I found no settings to change the TLS configuration. Is there any way to change it?