Add support for TLSv1.3 in nginx configurations

[malmor]

Thank you for contributing to Harbor!

Comprehensive Summary of your change

This PR enables TLSv1.3 by default in the nginx configuration. This way the configuration follows the linked recommendations and the nginx default configuration.

Issue being fixed

Fixes #18358

Please indicate you've done the following:

• Well Written Title and Summary of the PR
• Label the PR as needed. "release-note/ignore-for-release, release-note/new-feature, release-note/update, release-note/enhancement, release-note/community, release-note/breaking-change, release-note/docs, release-note/infra, release-note/deprecation"
• Accepted the DCO. Commits without the DCO will delay acceptance.
• Made sure tests are passing and test coverage is added if needed.
• Considered the docs impact and opened a new docs issue or PR with docs changes if needed in website repository.

[MinerYang]

Hi @malmor ,
Could you please help to rebase and resolve the conflict since the notary has been removed from main
Thanks!

[malmor]

Hey @MinerYang,
sure - I just rebased my branch and resolved the conflicts in the notary files.

[codecov]

Codecov Report

Merging #18659 (5cd456f) into main (982ff0a) will increase coverage by 22.60%.
The diff coverage is n/a.

@@             Coverage Diff             @@
##             main   #18659       +/-   ##
===========================================
+ Coverage   44.78%   67.39%   +22.60%     
===========================================
  Files         235      980      +745     
  Lines       13067   106739    +93672     
  Branches     2665     2665               
===========================================
+ Hits         5852    71935    +66083     
- Misses       6920    30941    +24021     
- Partials      295     3863     +3568     

Flag	Coverage Δ
unittests	67.39% <ø> (+22.60%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 750 files with indirect coverage changes

[MinerYang]

lgtm

[wy65701436]

LGTM

[OrlinVasilev]

@malmor thank you for contributing :) congrats on your first PR here :)

[niko-la-petrovic]

For those who are looking to get TLSv1.3 before the release 2.9.0 comes out, you can add to line 61 of the prepare script

echo "Adding support for TLSv1.3"
sed -i $config_dir/nginx/nginx.conf -e 's/ssl_protocols TLSv1.2/ssl_protocols TLSv1.2 TLSv1.3/g'

Because the prepare script regenerates the nginx.conf, I think this is a sensible way to adjust the nginx.conf file in a reproducible way.