summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2014-10-25 12:11:49 -0200
committerSilvio Rhatto <rhatto@riseup.net>2014-10-25 12:11:49 -0200
commit38552d702afefe11b3ca4832d54608a38d13d810 (patch)
tree9eb144e29dd0ab98a696207bc5831f610f15c048
parentca3b256ab8f92a4c9b44d7d018aebbc23864b892 (diff)
downloadpuppet-nginx-38552d702afefe11b3ca4832d54608a38d13d810.tar.gz
puppet-nginx-38552d702afefe11b3ca4832d54608a38d13d810.tar.bz2
Disable compression (BREACH) (2)
-rw-r--r--templates/nginx.conf.erb2
1 files changed, 2 insertions, 0 deletions
diff --git a/templates/nginx.conf.erb b/templates/nginx.conf.erb
index c181b12..cf339dd 100644
--- a/templates/nginx.conf.erb
+++ b/templates/nginx.conf.erb
@@ -24,6 +24,8 @@ http {
proxy_read_timeout 120;
tcp_nodelay on;
+ # disable compression
+ # prevents BREACH attack
gzip off;
#gzip_disable "MSIE [1-6]\.(?!.*SV1)";