diff --git a/modules/services/nginx.nix b/modules/services/nginx.nix
index e69de29b..1b1867fb 100644
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@@ -0,0 +1,15 @@
+{ config, lib, pkgs, ... }:
+
+{
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
+  services.nginx = {
+    enable = true;
+
+    # Use recommended settings
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+  };
+}