From 407acdd1a00d1dc2242362f2b569bd261fb1d2e5 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Sun, 17 May 2020 17:25:34 +0200
Subject: lists.fripost.org: Improve gzip support.

---
 roles/lists/files/etc/nginx/sites-available/sympa | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

(limited to 'roles/lists/files/etc/nginx/sites-available/sympa')

diff --git a/roles/lists/files/etc/nginx/sites-available/sympa b/roles/lists/files/etc/nginx/sites-available/sympa
index cdc2364..4cfc11b 100644
--- a/roles/lists/files/etc/nginx/sites-available/sympa
+++ b/roles/lists/files/etc/nginx/sites-available/sympa
@@ -36,8 +36,7 @@ server {
     gzip on;
     gzip_vary on;
     gzip_min_length 256;
-    gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
-    gzip_types application/javascript application/json application/xml image/x-icon text/css text/plain;
+    gzip_types application/font-woff application/font-woff2 application/javascript application/json application/xml image/x-icon text/css text/plain;
 
     location = /robots.txt {
         allow all;
@@ -55,7 +54,7 @@ server {
     location ^~ /pictures-sympa/ { alias /var/lib/sympa/pictures; }
 
     location ~* ^/sympa(?:/|$) {
-        gzip off;
+        gzip off; # protect against BREACH
 
         fastcgi_split_path_info ^(/sympa)(.*)$;
         include snippets/fastcgi.conf;
@@ -67,7 +66,7 @@ server {
         return 302 /$1/sympa$args;
     }
     location ~* ^/(?<vhost>[^/]+)/sympa(?:/|$) {
-        gzip off;
+        gzip off; # protect against BREACH
 
         if (!-f /etc/sympa/$vhost/robot.conf) {
             return 404;
-- 
cgit v1.2.3