openstack/kolla-ansible
Code Issues Proposed changes

Enable deflate when using tls for horizon

Browse Source 
deflate is disable because of breach attach[0] issue. But it has be
fixed on horizon size through[1], so we cloud enable deflate all the
time.

compress application/json too in default.

[0] https://wiki.openstack.org/wiki/OSSN/OSSN-0037
[1] https://review.openstack.org/#/c/596549/

Change-Id: I364c8a71633fac846dbaac8eaa0b78191e6d7d0e
Closes-Bug: #1827976
This commit is contained in:
Jeffrey Zhang 2019-05-07 11:28:06 +08:00
parent fe71a5c059
commit 06a8161a18
1 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ansible/roles/horizon/templates/horizon.conf.j2
View File

@ -34,13 +34,12 @@ TraceEnable off
{% if kolla_enable_tls_external | bool %} {% if kolla_enable_tls_external | bool %}
Header edit Location ^http://(.*)$ https://$1 Header edit Location ^http://(.*)$ https://$1
{% else %} {% endif %}
# NOTE(Jeffrey4l): Only enable deflate when tls is disabled until the
# OSSN-0037 is fixed.
# see https://wiki.openstack.org/wiki/OSSN/OSSN-0037 for more information.
<IfModule mod_deflate.c> <IfModule mod_deflate.c>
# Compress HTML, CSS, JavaScript, Text, XML and fonts # Compress HTML, CSS, JavaScript, Json, Text, XML and fonts
AddOutputFilterByType DEFLATE application/javascript AddOutputFilterByType DEFLATE application/javascript
AddOutputFilterByType DEFLATE application/json
AddOutputFilterByType DEFLATE application/rss+xml AddOutputFilterByType DEFLATE application/rss+xml
AddOutputFilterByType DEFLATE application/vnd.ms-fontobject AddOutputFilterByType DEFLATE application/vnd.ms-fontobject
AddOutputFilterByType DEFLATE application/x-font AddOutputFilterByType DEFLATE application/x-font
@ -62,7 +61,6 @@ Header edit Location ^http://(.*)$ https://$1
AddOutputFilterByType DEFLATE text/plain AddOutputFilterByType DEFLATE text/plain
AddOutputFilterByType DEFLATE text/xml AddOutputFilterByType DEFLATE text/xml
</IfModule> </IfModule>
{% endif %}
<IfModule mod_expires.c> <IfModule mod_expires.c>
<Filesmatch "\.(jpg|jpeg|png|gif|js|css|swf|ico|woff)$"> <Filesmatch "\.(jpg|jpeg|png|gif|js|css|swf|ico|woff)$">