Merge branch 'breack-attack' into 'master'

Breack attack

Fixes #1104

1 files changed, 5 insertions, 2 deletions

diff --git a/lib/support/nginx/gitlab b/lib/support/nginx/gitlab
index 5bff362da0e..f64c8d5883c 100644
--- a/lib/support/nginx/gitlab
+++ b/lib/support/nginx/gitlab
@@ -42,6 +42,10 @@ server {
   # if a file, which is not found in the root folder is requested,
   # then the proxy pass the request to the upsteam (gitlab unicorn)
   location @gitlab {
+    # If you use https make sure you disable gzip compression 
+    # to be safe against BREACH attack
+    # gzip off;
+
     proxy_read_timeout 300; # Some requests take more than 30 seconds.
     proxy_connect_timeout 300; # Some requests take more than 30 seconds.
     proxy_redirect     off;
@@ -63,5 +67,4 @@ server {
   }
 
   error_page 502 /502.html;
-}
-
+}
\ No newline at end of file