summaryrefslogtreecommitdiff
path: root/manifests
diff options
context:
space:
mode:
Diffstat (limited to 'manifests')
-rw-r--r--manifests/init.pp8
1 files changed, 8 insertions, 0 deletions
diff --git a/manifests/init.pp b/manifests/init.pp
index 9caf35e..cbdd051 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -82,6 +82,14 @@ class apache(
require => Package["apache"],
}
+ # disable compression
+ # prevents BREACH attack
+ # see https://superuser.com/questions/627413/how-do-i-disable-http-level-compression
+ module { [ "deflate", "gzip" ]:
+ ensure => absent,
+ require => Package["apache"],
+ }
+
# apache mod_macro configuration
file { "${macros}":
ensure => present,