Add some additional config

modules/proxy.nix

@@ -38,6 +38,7 @@ let
   };
 
   mkProxy = port: ''
+    import common_config
     reverse_proxy http://${upstream}:${toString port}
   '';
 
@@ -74,7 +75,20 @@ in
     email = "me@${atriDotDad}";
 
     extraConfig = ''
+      (common_config) {
+        # Enable Zstandard and Gzip compression
+        encode zstd gzip
+
+        header {
+          Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+          X-Content-Type-Options "nosniff"
+          X-Frame-Options "DENY"
+          Referrer-Policy "strict-origin-when-cross-origin"
+        }
+      }
+
       ${atriDotDad} {
+        import common_config
         ${aiBotsMatcher}
 
         handle /.well-known/matrix/server {