You can find a lot of ppa on the internet where people build nginx with ready-made brotli + security modules, what I showed above, the cloudflare patch, you can use this method to start. It's just that there are these modules that the user must build himself, and nginx itself, in order for the module to connect, not everyone can do it initially. So ppa is the simplest and best method.
Let's say that this ppa contains everything you need for the site to work well, you don't need to do anything, just set up your config for the site.
The myguard NGINX stack is a curated, performance-tuned build of NGINX (https://nginx.org/) and its drop-in successor Angie, packaged as native .deb files for Debian and Ubuntu. Every release is rebuilt daily, linked against a hardened OpenSSL, and shipped with 50+ third-party modules baked in —...
launchpad.net
Here is a list of what is in the ppa
Mainline NGINX & Angie packages with HTTP/3, kTLS, ModSecurity v3, Brotli, Zstd, Lua — plus 104 ready-to-apt-install dynamic modules. Rebuilt daily.
deb.paranoid.nl
If you have a test domain and vds, I can do an initial setup for you under xenforo Nulled so that you can see the nginx config setting with your own eyes, but this is actually a bad idea, because, as practice shows, when you do the work for person, he does not understand more than 80% of what has been done.
not me 
