Don't set ssl_protocols anymore as it prevents disabling TLS versions.
ssl_protocols now defaults to TLS 1.2 and 1.3. There is therefore no need to have configuration to set it to these same values.
There is however a drawback since it makes it impossible to disable one of these TLS versions afterwards. The code in nginx can only enable versions, not disable them. This means that the following snippets are equivalent:
ssl_protocols TLSv1.2 TLSv1.3;
and
ssl_protocols TLSv1.2; ssl_protocols TLSv1.3;