Create dhparam.pem

To generate dhparam.pem, run

cd /etc/ssl/
openssl dhparam -out dhparam.pem 4096

To add dhparam in Nginx, add

ssl_dhparam /etc/ssl/dhparam.pem;

See SSL