Optimal gcc parameters for building nginx from source

Hi

Are there recommended gcc parameters when building nginx from source - regarding performance and security?
--with-cc-opt=parameters

I noticed that the prebuilt package on ubuntu used
--with-cc-opt='-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2' --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-z,relro'

Is this recommended?
What would make sense resp. be a best practice approach?

thx