On: Nginx 1.13 released with TLS 1.3 support

Then don't write a compile-recipe from scratch, but take e.g. your distro's packaging script & just add the switch you need. This is easy and relatively fool-proof.