Optimal gcc parameters for building nginx from source

[Reto Haeberli]

Hello list

Are there recommended gcc parameters when building nginx from source - regarding performance and security?
--with-cc-opt=parameters

I noticed that the prebuilt package on ubuntu used
--with-cc-opt='-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2' --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-z,relro'

Is this recommended?
What would make sense resp. be a best practice approach?

thx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20140319/129655ed/attachment.html>