Validate Nginx server configuration for server_tokens off, modern TLSv1.2/TLSv1.3 protocols, and HSTS headers.