Disable compression (BREACH) (2)

diff --git a/templates/nginx.conf.erb b/templates/nginx.conf.erb
index c181b12b541408df3d4ae1c5a85b1683eb4e261c..cf339dd58cafe5d0714e978ea2b9affb54e624c9 100644 (file)
--- a/templates/nginx.conf.erb
+++ b/templates/nginx.conf.erb
@@ -24,6 +24,8 @@ http {
     proxy_read_timeout 120;
     tcp_nodelay        on;
 
+    # disable compression
+    # prevents BREACH attack
     gzip  off;
     #gzip_disable "MSIE [1-6]\.(?!.*SV1)";