From 38552d702afefe11b3ca4832d54608a38d13d810 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Sat, 25 Oct 2014 12:11:49 -0200
Subject: Disable compression (BREACH) (2)

---
 templates/nginx.conf.erb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/templates/nginx.conf.erb b/templates/nginx.conf.erb
index c181b12..cf339dd 100644
--- a/templates/nginx.conf.erb
+++ b/templates/nginx.conf.erb
@@ -24,6 +24,8 @@ http {
     proxy_read_timeout 120;
     tcp_nodelay        on;
 
+    # disable compression
+    # prevents BREACH attack
     gzip  off;
     #gzip_disable "MSIE [1-6]\.(?!.*SV1)";
 
-- 
cgit v1.2.3