From f541edbb2a3062d6462addcde5b665add4c2d6f9 Mon Sep 17 00:00:00 2001 From: ariasuni Date: Sat, 26 Aug 2017 20:24:38 +0200 Subject: [PATCH 1/3] [enh] enable gzip compression for common text mimetypes in Nginx --- data/templates/nginx/plain/global.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/data/templates/nginx/plain/global.conf b/data/templates/nginx/plain/global.conf index b3a5f356a..a3096d009 100644 --- a/data/templates/nginx/plain/global.conf +++ b/data/templates/nginx/plain/global.conf @@ -1 +1,2 @@ server_tokens off; +gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; From e1b5eead3f24535e4825ac080edf65f5157c7623 Mon Sep 17 00:00:00 2001 From: ariasuni Date: Mon, 28 Aug 2017 16:40:50 +0200 Subject: [PATCH 2/3] [fix] disable gzip compression for json to avoid BREACH attack --- data/templates/nginx/plain/global.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/templates/nginx/plain/global.conf b/data/templates/nginx/plain/global.conf index a3096d009..341f08620 100644 --- a/data/templates/nginx/plain/global.conf +++ b/data/templates/nginx/plain/global.conf @@ -1,2 +1,2 @@ server_tokens off; -gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; +gzip_types text/plain text/css application/javascript text/xml application/xml application/xml+rss text/javascript; From 4eeeb783af42ce41bbf65949d8ed24fe9d5fa8cd Mon Sep 17 00:00:00 2001 From: Alexandre Aubin Date: Sun, 14 Jan 2018 02:11:11 +0100 Subject: [PATCH 3/3] Keep only css and javascript for gzip types. --- data/templates/nginx/plain/global.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/templates/nginx/plain/global.conf b/data/templates/nginx/plain/global.conf index 341f08620..ca8721afb 100644 --- a/data/templates/nginx/plain/global.conf +++ b/data/templates/nginx/plain/global.conf @@ -1,2 +1,2 @@ server_tokens off; -gzip_types text/plain text/css application/javascript text/xml application/xml application/xml+rss text/javascript; +gzip_types text/css text/javascript application/javascript;