Optimal gcc parameters for building nginx from source

Hello list

Are there recommended gcc parameters when building nginx from source -
regarding performance and security?
–with-cc-opt=parameters

I noticed that the prebuilt package on ubuntu used
–with-cc-opt=’-g -O2 -fstack-protector --param=ssp-buffer-size=4
-Wformat -Werror=format-security -D_FORTIFY_SOURCE=2’
–with-ld-opt=’-Wl,-Bsymbolic-functions -Wl,-z,relro’

Is this recommended?
What would make sense resp. be a best practice approach?

thx