Тут всё просто, можно залупить в одну команду.

apt install curl gnupg2 ca-certificates lsb-release debian-archive-keyring

curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor \
    | sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null

echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
http://nginx.org/packages/mainline/debian `lsb_release -cs` nginx" \
    | sudo tee /etc/apt/sources.list.d/nginx.list

apt update && apt install nginx -y

Ниже пример конфига более менее дефолного, но более расширенного чем предлагается по умолчанию

user www-data;

worker_processes auto;

pid /run/nginx.pid;

events {

        worker_connections 768;

        use epoll;

        multi_accept on;

}



http {



        ##

        # Basic Settings

        ##



        sendfile on;

        tcp_nopush on;

        tcp_nodelay on;

        keepalive_timeout 65;

        types_hash_max_size 2048;

        server_tokens off;

        # server_names_hash_bucket_size 64;
        # server_name_in_redirect off;

        include /etc/nginx/mime.types;

        default_type application/octet-stream;

        ##
        # SSL Settings
        ##

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE

        ssl_prefer_server_ciphers on;

        ##
        # Logging Settings
        ##

        log_format  custom '$remote_addr - $remote_user [$time_local] '
                                 '"$request" $status $body_bytes_sent '
                             '"$http_referer" "$http_user_agent" '
                             '"$http_x_forwarded_for" $request_id ';


        access_log /var/log/nginx/access.log custom;

        error_log /var/log/nginx/error.log;

        ##

        # Gzip Settings
        ##

        gzip on;

        gzip_disable "msie6";

        gzip_vary on;

        gzip_proxied any;

        gzip_comp_level 6;

        gzip_buffers 16 8k;

        gzip_http_version 1.1;

        gzip_types text/plain text/css application/json application/javascript text/xml 
application/xml application/xml+rss text/javascript;

        ##

        # Virtual Host Configs

        ##

        include /etc/nginx/sites-enabled/*.conf;

}