diff --git a/plugins/nginx-vhosts/install b/plugins/nginx-vhosts/install
index c587c6dd6..348f4e813 100755
--- a/plugins/nginx-vhosts/install
+++ b/plugins/nginx-vhosts/install
@@ -30,7 +30,7 @@ chmod 0440 /etc/sudoers.d/dokku-nginx
 
 # if dhparam.pem has not been created, create it the first time
 if [[ ! -f /etc/nginx/dhparam.pem ]]; then
-  openssl dhparam -out /etc/nginx/dhparam.pem 2048
+  openssl dhparam -out /etc/nginx/dhparam.pem 4096
   chown root:root /etc/nginx/dhparam.pem
 fi
 
@@ -47,7 +47,7 @@ ssl_session_timeout 1d;
 ssl_session_tickets on;
 
 ssl_dhparam /etc/nginx/dhparam.pem;
-ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS;
+ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
 
 EOF