those who nginx:

modules/server/default.nix

@@ -2,7 +2,7 @@
 with lib;
 let cfg = config.void.server;
 in {
-  imports = [ ./dns ];
+  imports = [ ./dns ./nginx.nix ];
 
   options.void.server = { isServer = mkEnableOption false; };
 

modules/server/nginx.nix

@@ -0,0 +1,30 @@
+{ config, lib, ... }:
+with lib;
+let cfg = config.void.server.nginx;
+in {
+  imports = [ ./dns ];
+
+  options.void.server.nginx = { enable = mkEnableOption false; };
+
+  config = mkIf cfg.enable {
+    security.acme = {
+      acceptTerms = true;
+      defaults.email = "Sayeko@proton.me";
+    };
+    services.nginx = {
+      enable = true;
+      recommendedTlsSettings = true;
+      recommendedBrotliSettings = true;
+      recommendedOptimisation = true;
+      recommendedGzipSettings = true;
+      recommendedProxySettings = true;
+      recommendedZstdSettings = true;
+
+      commonHttpConfig = ''
+        access_log /var/log/nginx/access.log combined_anon buffer=32k flush=5m;
+        error_log /var/log/nginx/error.log warn;
+      '';
+    };
+
+  };
+}