The main difference is that I replace the stock config with one that behaves like Debian, i.e. with the sites-available and sites-enabled subdirs. I did that so that I could deploy to Ubuntu-server or FreeBSD using a common Ansible role. Currently I have only deployed nginx to FreeBSD, the Ubuntu ones were directly setup using Digital Ocean pre-installed images. I also use acme.sh to handle the certs, so TLS config is automated as well.