You can find a lot of ppa on the internet where people build nginx with ready-made brotli + security modules, what I showed above, the cloudflare patch, you can use this method to start. It's just that there are these modules that the user must build himself, and nginx itself, in order for the module to connect, not everyone can do it initially. So ppa is the simplest and best method.
Let's say that this ppa contains everything you need for the site to work well, you don't need to do anything, just set up your config for the site.
Please see https://deb.myguard.nl/nginx-modules for a detailed description. Currently I maintain both this PPA and https://deb.myguard.nl for the same packages, although deb.myguard.nl has higher preference The packages here are compiled with OpenSSL1.1.1x (except Jammy), on my own repo there...
launchpad.net
Here is a list of what is in the ppa
Discover the power of Nginx modules for Debian/Ubuntu, including modsecurity, brotli, zstd, pagespeed, hpack, lua, openssl3, naxsi, njs, security-headers, and more! Enhance performance and strengthen security.
deb.paranoid.nl
If you have a test domain and vds, I can do an initial setup for you under xenforo Nulled so that you can see the nginx config setting with your own eyes, but this is actually a bad idea, because, as practice shows, when you do the work for person, he does not understand more than 80% of what has been done.
not me 
