diff --git a/hosts/surgat/default.nix b/hosts/surgat/default.nix
index fda7664..86f4e3d 100644
--- a/hosts/surgat/default.nix
+++ b/hosts/surgat/default.nix
@@ -13,6 +13,16 @@ in {
 
   networking.hostName = hostName;
 
+  services.nginx = {
+    recommendedTlsSettings = true;
+    recommendedOptimisation = true;
+    recommendedGzipSettings = true;
+    logError = "off";
+    appendHttpConfig = ''
+      access_log off;
+    '';
+  };
+
   dadada.admin = {
     enable = true;
     users = {