I'd prefer if this were not offered as a docker image, but rather as a configuration file or config file generator, akin to what mozilla does for recommended SSL settings [0].

A config generator seems obviously better since anyone who knows what they're doing can use it with either nginx installed from their distro's repos, or with an nginx docker container.

[0]: https://ssl-config.mozilla.org/#server=nginx&version=1.17.7