From f0bdc984464a917b6ea5276da69d9ecd8a846be5 Mon Sep 17 00:00:00 2001
From: EuAndreh <eu@euandre.org>
Date: Mon, 18 Sep 2023 20:44:38 -0300
Subject: system.scm: Explicitly disable compression

---
 src/infrastructure/guix/system.scm | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src')

diff --git a/src/infrastructure/guix/system.scm b/src/infrastructure/guix/system.scm
index 3e1503e..89272f0 100644
--- a/src/infrastructure/guix/system.scm
+++ b/src/infrastructure/guix/system.scm
@@ -413,6 +413,7 @@
                      # BearSSL still doesn't TLSv1.3, so we deem TLSv1.2 as
                      # acceptable
                      ssl_protocols TLSv1.2 TLSv1.3;
+                     gzip off;  # Disable compression altogether due to BREACH
                      include /opt/secrets/nginx.conf.txt;
                      charset utf-8;
                      autoindex on;
-- 
cgit v1.2.3