Merge #3887

3887: Remove OCSP stapling by Nginx r=nextgens a=svoop

Let's Encrypt has dropped OCSP support and the resulting warning may cause problems when restarting or reloading the frontend Nginx e.g. as part of a post cert update hook.

## What type of PR?

Feature removal

## What does this PR do?

### Related issue(s)
closes #3886

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Sven Schwyn <sven.schwyn@bitcetera.com>

core/nginx/conf/nginx.conf

@@ -116,8 +116,6 @@ http {
 {% endif %}
 
       include /etc/nginx/tls.conf;
-      ssl_stapling on;
-      ssl_stapling_verify on;
       ssl_session_cache shared:SSLHTTP:3m;
       add_header Strict-Transport-Security 'max-age=31536000';
 

towncrier/newsfragments/3886.misc

@@ -0,0 +1 @@
+Remove OCSP stapling by Nginx because Let's Encrypt has dropped OCSP support