feat: add more nginx recommended settings

hosts/nachtigall/apps/nginx-mastodon.nix

@@ -9,6 +9,7 @@ in
       # mastodon only supports https, but you can override this if you offload tls elsewhere.
       forceSSL = lib.mkDefault true;
       enableACME = lib.mkDefault true;
+      recommendedGzipSettings = true;
 
       locations."/system/".alias = "/var/lib/mastodon/public-system/";
 

hosts/nachtigall/apps/nginx.nix

@@ -15,7 +15,9 @@ in {
     proxyCachePath.cache = {
       enable = true;
     };
+    recommendedOptimisation = true;
     recommendedProxySettings = true;
+    recommendedTlsSettings = true;
   };
   # Nginx user needs access to mastodon unix sockets
   users.users.nginx.extraGroups = [ "mastodon" ];