The current ansible role produces an nginx config incompatible with Funkwhale 1.3.0. This rewrites the role's template based on the current example from the Funkwhale repo.
I think this should be drop-in, provided the version of funkwhale being installed is 1.3.0+ and all clients support TLSv1.3. If backwards compatibility with <1.3.0 or TLSv1.2 is important, I can try to re-add it in conditionals.
I have been running this for a couple days on my personal instance, but I don't have a setup conducive to testing every option handled by the template (TLS termination, certbot, etc).