akkoma/installation
Norm 51f09531c4 Disable gzip compression in Caddyfile
Currently Akkoma doesn't have any proper mitigations against BREACH,
which exploits the use of HTTP compression to exfiltrate sensitive data.
(see: https://akkoma.dev/AkkomaGang/akkoma/pulls/721#issuecomment-11487)

To err on the side of caution, disable gzip compression for now until we
can confirm that there's some sort of mitigation in place (whether that
would be Heal-The-Breach on the Caddy side or any Akkoma-side
mitigations).
2024-06-17 23:13:55 -04:00
..
apache Use /var/tmp for media cache path in apache/nginx configs 2024-05-15 20:42:48 -04:00
caddy Disable gzip compression in Caddyfile 2024-06-17 23:13:55 -04:00
freebsd/rc.d Don't listen Erlang Port Mapper Daemon (4369/tcp) on 0.0.0.0 2022-12-09 21:36:21 -05:00
init.d Add no_new_privs to OpenRC service files 2023-07-22 02:40:17 -04:00
netbsd/rc.d Don't listen Erlang Port Mapper Daemon (4369/tcp) on 0.0.0.0 2022-12-09 21:36:21 -05:00
nginx Use /var/tmp for media cache path in apache/nginx configs 2024-05-15 20:42:48 -04:00
openbsd Update sample config files (#48) 2022-07-06 18:50:01 +00:00
akkoma-mongooseim.cfg Update sample config files (#48) 2022-07-06 18:50:01 +00:00
akkoma.service Add NoNewPrivileges to systemd service file for source installs 2023-07-22 02:40:25 -04:00
akkoma.supervisord Don't listen Erlang Port Mapper Daemon (4369/tcp) on 0.0.0.0 2022-12-09 21:36:21 -05:00
akkoma.vcl varnish config/docs (#342) 2022-12-05 13:39:27 +00:00