ssl_protocols TLSv1.2 TLSv1.3;
and all ssl_* settings should be part of your server {} blocks, not at http {} block level.
and all ssl_* settings should be part of your server {} blocks, not at http {} block level.