From: Silvio Rhatto <rhatto@riseup.net>
Date: Sat, 25 Oct 2014 14:11:49 +0000 (-0200)
Subject: Disable compression (BREACH) (2)
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=38552d702afefe11b3ca4832d54608a38d13d810;p=puppet-nginx.git

Disable compression (BREACH) (2)
---

diff --git a/templates/nginx.conf.erb b/templates/nginx.conf.erb
index c181b12..cf339dd 100644
--- a/templates/nginx.conf.erb
+++ b/templates/nginx.conf.erb
@@ -24,6 +24,8 @@ http {
     proxy_read_timeout 120;
     tcp_nodelay        on;
 
+    # disable compression
+    # prevents BREACH attack
     gzip  off;
     #gzip_disable "MSIE [1-6]\.(?!.*SV1)";