Switch to a modern configuration, when there are no longer any old Android devices that only support TLSv1.2.
Look at nginx logs to see if there are any connections that still connect with TLSv1.2. After switching to the modern configuration, the custom log format can be reverted.
It's a bit quiet in here.