diff --git a/configuration/common/default.nix b/configuration/common/default.nix
index 6d96f16..f2c0dca 100644
--- a/configuration/common/default.nix
+++ b/configuration/common/default.nix
@@ -38,6 +38,14 @@
   services.openssh.challengeResponseAuthentication = false;
   services.openssh.permitRootLogin = lib.mkDefault "no";
 
+  services.nginx = {
+    enableReload = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+  };
+
   security.acme = {
     email = "letsencrypt@clerie.de";
     acceptTerms = true;