diff --git a/modules/services/nginx/default.nix b/modules/services/nginx/default.nix index b91d655..1ae902a 100644 --- a/modules/services/nginx/default.nix +++ b/modules/services/nginx/default.nix @@ -209,6 +209,7 @@ in recommendedOptimisation = true; recommendedTlsSettings = true; recommendedProxySettings = true; + recommendedBrotliSettings = true; # Only allow PFS-enabled ciphers with AES256 sslCiphers = "AES256+EECDH:AES256+EDH:!aNULL";