Enable the upstream nginx module from nixpkgs.

nix/modules/upstream/nixpkgs/default.nix

@@ -0,0 +1,15 @@
+{ nixosModulesPath
+, ...
+}:
+{
+  imports = [
+    ./nginx.nix
+  ] ++
+  # List of imported NixOS modules
+  # TODO: how will we manage this in the long term?
+  map (path: nixosModulesPath + path) [
+    "/misc/meta.nix"
+    "/security/acme/"
+    "/services/web-servers/nginx/"
+  ];
+}

nix/modules/upstream/nixpkgs/nginx.nix

@@ -0,0 +1,6 @@
+{
+  systemd.services.nginx.serviceConfig.DynamicUser = true;
+
+  # Disable this for now
+  services.logrotate.settings.nginx = { };
+}