stop cipher TLS_DH_anon_WITH_AES_128_GCM_SHA256

why do you use just TLSv1_2? there are quite some very bad ones in that one group op ciphers next to the two anonymous ones.

DEFAULT on itself is much better, there you can then exclude TLS_1 and TLS1_1 if you want to have only TLS1.2.

but if you really want TLSv1_2 without those two do: 'TLSv1_2:!ADH'

PS: three questions about pretty much the same issue is kinda a lot, i think you can delete two of them.