faster and more secure nginx settings for blog

nixos/boxes/mb1/blog.nix

@@ -1,16 +1,21 @@
-{
-  config,
-  pkgs,
-  ...
-}: let
+{pkgs, ...}: let
   path = "/var/www/blog/";
 in {
   imports = [../nginx.nix];
+
   services.nginx = {
+    recommendedBrotliSettings = true;
+    recommendedGzipSettings = true;
+    recommendedTlsSettings = true;
+    recommendedOptimisation = true;
+    package = pkgs.nginxQuic;
     virtualHosts = {
       "blog.cyplo.dev" = {
         forceSSL = true;
         enableACME = true;
+        quic = true;
+        extraConfig = ''
+        '';
         locations."/" = {
           root = path;
         };