diff --git a/assets/runtime/config/nginx/gitlab b/assets/runtime/config/nginx/gitlab index 4c64abe9..5597e189 100644 --- a/assets/runtime/config/nginx/gitlab +++ b/assets/runtime/config/nginx/gitlab @@ -59,6 +59,7 @@ server { client_max_body_size {{NGINX_MAX_UPLOAD_SIZE}}; ## See app/controllers/application_controller.rb for headers set + add_header X-Accel-Buffering {{NGINX_ACCEL_BUFFERING}}; ## Individual nginx logs for this GitLab vhost access_log {{GITLAB_LOG_DIR}}/nginx/gitlab_access.log; @@ -97,7 +98,6 @@ server { ## If you use HTTPS make sure you disable gzip compression ## to be safe against BREACH attack. # gzip off; - add_header X-Accel-Buffering {{NGINX_ACCEL_BUFFERING}}; ## https://github.com/gitlabhq/gitlabhq/issues/694 ## Some requests take more than 30 seconds. @@ -164,7 +164,6 @@ server { ## If you use HTTPS make sure you disable gzip compression ## to be safe against BREACH attack. # gzip off; - add_header X-Accel-Buffering {{NGINX_ACCEL_BUFFERING}}; ## https://github.com/gitlabhq/gitlabhq/issues/694 ## Some requests take more than 30 seconds. diff --git a/assets/runtime/config/nginx/gitlab-ssl b/assets/runtime/config/nginx/gitlab-ssl index 9af0ce0a..a9d9096f 100644 --- a/assets/runtime/config/nginx/gitlab-ssl +++ b/assets/runtime/config/nginx/gitlab-ssl @@ -90,7 +90,8 @@ server { ssl_session_timeout 5m; ## See app/controllers/application_controller.rb for headers set - add_header Strict-Transport-Security max-age={{NGINX_HSTS_MAXAGE}}; + add_header X-Accel-Buffering {{NGINX_ACCEL_BUFFERING}}; + add_header Strict-Transport-Security "max-age={{NGINX_HSTS_MAXAGE}};"; ## [Optional] If your certficate has OCSP, enable OCSP stapling to reduce the overhead and latency of running SSL. ## Replace with your ssl_trusted_certificate. For more info see: @@ -146,7 +147,6 @@ server { ## If you use HTTPS make sure you disable gzip compression ## to be safe against BREACH attack. gzip off; - add_header X-Accel-Buffering {{NGINX_ACCEL_BUFFERING}}; ## https://github.com/gitlabhq/gitlabhq/issues/694 ## Some requests take more than 30 seconds. @@ -214,7 +214,6 @@ server { ## If you use HTTPS make sure you disable gzip compression ## to be safe against BREACH attack. gzip off; - add_header X-Accel-Buffering {{NGINX_ACCEL_BUFFERING}}; ## https://github.com/gitlabhq/gitlabhq/issues/694 ## Some requests take more than 30 seconds.