Use at your own risk.
Setup assumes Debian 8.x fresh install.
Static IP should be assigned.
All commands are run as root.
Test this on a local VM before executing on your live servers.
Resources:
https://forum.vestacp.com/viewtopic.php?f=20&t=12522
https://forum.vestacp.com/viewtopic.php?t=12732
https://www.linuxbabe.com/nginx/enable-http2-debian-8-nginx-web-server
https://www.digitalocean.com/community/tutorials/how-to-set-up-nginx-with-http-2-support-on-ubuntu-16-04
Better SSL: https://forum.vestacp.com/viewtopic.php?f=20&t=11425
Force SSL: https://vestacp.com/docs/#how-to-force-https