apt-get install --no-install-recommends \
  nginx nginx-core libnginx-mod-stream \
  certbot python3-certbot-nginx

cd /etc/nginx/modules-enabled

rm \
 50-mod-http-geoip.conf \
 50-mod-http-image-filter.conf \
 50-mod-http-xslt-filter.conf \
 50-mod-mail.conf \
 70-mod-stream-geoip.conf

cp security.conf /etc/nginx/conf.d/