Nginx reverse proxy with ModSecurity Web Application Firewall, SSL termination (certbot) and brotli compression