akkoma/installation
Norm 51f09531c4 Disable gzip compression in Caddyfile
Currently Akkoma doesn't have any proper mitigations against BREACH,
which exploits the use of HTTP compression to exfiltrate sensitive data.
(see: AkkomaGang/akkoma#721 (comment))

To err on the side of caution, disable gzip compression for now until we
can confirm that there's some sort of mitigation in place (whether that
would be Heal-The-Breach on the Caddy side or any Akkoma-side
mitigations).
2024-06-17 23:13:55 -04:00
..
apache Use /var/tmp for media cache path in apache/nginx configs 2024-05-15 20:42:48 -04:00
caddy Disable gzip compression in Caddyfile 2024-06-17 23:13:55 -04:00
freebsd/rc.d Don't listen Erlang Port Mapper Daemon (4369/tcp) on 0.0.0.0 2022-12-09 21:36:21 -05:00
init.d Add no_new_privs to OpenRC service files 2023-07-22 02:40:17 -04:00
netbsd/rc.d Don't listen Erlang Port Mapper Daemon (4369/tcp) on 0.0.0.0 2022-12-09 21:36:21 -05:00
nginx Use /var/tmp for media cache path in apache/nginx configs 2024-05-15 20:42:48 -04:00
openbsd Update sample config files (#48) 2022-07-06 18:50:01 +00:00
akkoma-mongooseim.cfg Update sample config files (#48) 2022-07-06 18:50:01 +00:00
akkoma.service Add NoNewPrivileges to systemd service file for source installs 2023-07-22 02:40:25 -04:00
akkoma.supervisord Don't listen Erlang Port Mapper Daemon (4369/tcp) on 0.0.0.0 2022-12-09 21:36:21 -05:00
akkoma.vcl varnish config/docs (#342) 2022-12-05 13:39:27 +00:00