From ebce045156665c54d920ee2f4034c29197452e7d Mon Sep 17 00:00:00 2001
From: Sameer Naik <sameer@nextbitcpu.com>
Date: Wed, 18 Jun 2014 12:59:25 +0530
Subject: [PATCH] ssl: disable gzip compression for https connections

---
 assets/config/nginx/gitlab.https.permissive | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assets/config/nginx/gitlab.https.permissive b/assets/config/nginx/gitlab.https.permissive
index 3b94b4cc..971266ec 100644
--- a/assets/config/nginx/gitlab.https.permissive
+++ b/assets/config/nginx/gitlab.https.permissive
@@ -110,7 +110,7 @@ server {
   location @gitlab {
     # If you use https make sure you disable gzip compression 
     # to be safe against BREACH attack
-    # gzip off;
+    gzip off;
 
     proxy_read_timeout 300; # Some requests take more than 30 seconds.
     proxy_connect_timeout 300; # Some requests take more than 30 seconds.